{"id":"CVE-2013-6282","kind":"vulnerability","aliases":["CVE-2013-6282"],"related":[],"title":"The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do…","description":"The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.","summary":"The Linux kernel's get_user and put_user functions do not validate the target address on ARM v6k and v7 platforms. A local application can read and write kernel memory, which can lead to privilege escalation.","severity":"high","cvss":8.8,"epss":0.39711,"exploited":true,"exploited_at":"2022-09-15T00:00:00+00:00","products":[{"name":"linux kernel","fixed":["3.2.54"],"affected":"< 3.2.54","ecosystem":"vendor"},{"name":"linux kernel","fixed":["3.4.12"],"affected":">= 3.3, < 3.4.12","ecosystem":"vendor"},{"name":"linux kernel","fixed":["3.5.5"],"affected":">= 3.5, < 3.5.5","ecosystem":"vendor"},{"name":"Linux Kernel","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["arm","embedded","exploited","infrastructure","linux"],"not_affected_if":["non-arm-platform","x86-only-hosts"],"how_to_check":null,"fix":"Apply the kernel update from your vendor or distribution that fixes CVE-2013-6282 (CISA: apply updates per vendor instructions).","status":"open","published_at":"2013-11-20T13:19:43+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:10:36+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:10:36Z","model":"claude-haiku-5-5","output":{"fix":"Apply the kernel update from your vendor or distribution that fixes CVE-2013-6282 (CISA: apply updates per vendor instructions).","reach":"local","impact":"high","summary":"The Linux kernel's get_user and put_user functions do not validate the target address on ARM v6k and v7 platforms. A local application can read and write kernel memory, which can lead to privilege escalation.","category":"infrastructure","who_cares":["linux","arm","embedded"],"confidence":0.6,"needs_auth":"yes","worst_case":"local user gains kernel memory read and write, leading to root privileges","analyst_note":"Find the fixed kernel versions and affected ARM kernel ranges from the vendor advisories or the kernel git fix commit; the sources here do not list them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["non-arm-platform","x86-only-hosts"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000461,"input_tokens":2846,"output_tokens":352,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2013':25A,28A '-6282':26A,29A '1':2A,81C '2':6A,85C '2013':138C '3.5.5':16A,95C 'address':58B,107C 'allow':109C 'android':132C 'api':9A,88C 'applic':67B,125C 'arbitrari':118C 'arm':22A,38B,60B,101C 'attack':110C 'certain':106C 'content':116C 'craft':124C 'cve':24A,27A 'devic':133C 'embed':39B 'escal':79B 'exploit':40B,127C 'function':10A,52B,89C 'get':3A,47B,82C 'infrastructur':41B 'kernel':14A,31A,33A,35A,37A,45B,72B,93C,119C 'lead':76B 'linux':13A,30A,32A,34A,36A,42B,44B,92C 'local':66B 'locat':121C 'memori':73B,120C 'modifi':114C 'novemb':137C 'octob':135C 'platform':23A,64B,102C 'privileg':78B 'put':7A,50B,86C 'read':69B,112C 'target':57B 'user':4A,8A,48B,51B,83C,87C 'v6k':19A,61B,98C 'v7':21A,63B,100C 'valid':55B,105C 'via':122C 'wild':130C 'write':71B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2013-11-20T13:19:43+00:00","kev":{"dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2013-6282","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-6282","severity":null,"published_at":"2022-09-15T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T11:39:16+00:00","note":null},{"source":"epss","external_id":"CVE-2013-6282","url":"https://api.first.org/data/v1/epss?cve=CVE-2013-6282","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2013-6282","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6282","severity":null,"published_at":"2013-11-20T13:19:43+00:00","modified_at":"2026-06-17T00:00:14+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}