CVE-2013-1763

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel...

7.2 HighPublic exploit

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Exploit likelihood

4.06%Up 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Record: CVE-2013-1763
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Record: CVE-2013-1763
Updated: 2026-11-02

EUVDEUVD-2013-1789 No score

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Record: EUVD-2013-1789
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xmh4-cqm8-6p2v No score

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel...

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Record: GHSA-xmh4-cqm8-6p2v
Weakness: CWE-20
Updated: 2026-11-02

OSVBELL-CVE-2013-1763 7.2

CVE-2013-1763 does not affect BellSoft software

Record: BELL-CVE-2013-1763
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-1763 No score

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Record: UBUNTU-CVE-2013-1763
Updated: 2026-11-02

Affected products

linux kernel

Affected packages

Affected packages
Package	Affected	Fixed
`kernel-rt` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-debug` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-debug-debuginfo` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-debug-devel` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-debuginfo` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-debuginfo-common-x86_64` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-devel` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-doc` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-firmware` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-trace` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt

Show 6 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-rt-trace-debuginfo` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-trace-devel` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-vanilla` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-vanilla-debuginfo` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`kernel-rt-vanilla-devel` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt
`mrg-rt-release` Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 5 CVEs	before 0:3.6.11-rt30.25.el6rt	0:3.6.11-rt30.25.el6rt

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)	2013-02-24
Exploit-DB	Linux Kernel 3.3.x < 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)	2013-02-27
Exploit-DB	Linux Kernel 3.7.10 (Ubuntu 12.10 x64) - 'sock_diag_handlers' Local Privilege Escalation (2)	2013-03-13
Exploit-DB	Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation	2015-08-26
PoC in GitHub	qkrtjsrbs315/CVE-2013-1763	2022-02-01

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, exploits, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1763 is a high vulnerability (CVSS 7.2) in Linux Kernel, published February 23, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.06%, the 90th percentile. No source names a fixed version.

References

Show 41 moreShow less