UBUNTU-CVE-2013-2634
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 22 Mar 2013, 00:00
Last modified:04 Feb 2026, 03:37
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
22 Mar 2013, 00:00
Published
Vulnerability first disclosed
04 Feb 2026, 03:37
Last Modified
Vulnerability information updated
Description
net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
Affected Systems
- ubuntu•linux
< 3.11.0-12.19 | < 4.2.0-16.19
- ubuntu•linux-aws
< 4.4.0-1002.2 | < 4.4.0-1001.10
- ubuntu•linux-gke
< 4.4.0-1003.3
- ubuntu•linux-goldfish
< 3.4.0-4.27
- ubuntu•linux-hwe
< 4.8.0-36.36~16.04.1
- ubuntu•linux-lts-utopic
< 3.16.0-25.33~14.04.2
- ubuntu•linux-lts-vivid
< 3.19.0-18.18~14.04.1
- ubuntu•linux-lts-wily
< 4.2.0-18.22~14.04.1
- ubuntu•linux-lts-xenial
< 4.4.0-13.29~14.04.1
- ubuntu•linux-manta
< 3.4.0-5.22
- ubuntu•linux-raspi2
< 4.2.0-1013.19
- ubuntu•linux-snapdragon
< 4.4.0-1012.12
References (14)
- https://ubuntu.com/security/CVE-2013-2634
- https://github.com/torvalds/linux/commit/29cd8ae0e1a39e239a3a7b67da1986add1199fc0
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=29cd8ae0e1a39e239a3a7b67da1986add1199fc0
- https://bugzilla.redhat.com/show_bug.cgi?id=923652
- http://www.openwall.com/lists/oss-security/2013/03/20/1
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4
- https://ubuntu.com/security/notices/USN-1809-1
- https://ubuntu.com/security/notices/USN-1811-1
- https://ubuntu.com/security/notices/USN-1812-1
- https://ubuntu.com/security/notices/USN-1813-1
- https://ubuntu.com/security/notices/USN-1814-1
- https://ubuntu.com/security/notices/USN-1824-1
- https://ubuntu.com/security/notices/USN-1829-1
- https://www.cve.org/CVERecord?id=CVE-2013-2634