coldbraid

CVE-2013-6282 Linux Kernel

The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.

CVSS
not scored

CWE-20

On CISA’s exploited list

Linux Kernel Improper Input Validation Vulnerability

Added
2022-09-15
Federal patch deadline
2022-10-06
Ransomware use
not known