CVE-2013-2546
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an...
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
Exploit likelihood
What each source reports
NVD Score used
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
CVE-2013-2546- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
CVE-2013-2546- Updated
- 2026-11-02
EUVDEUVD-2013-2488 No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
EUVD-2013-2488- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvmp-6gcj-rjrw No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an...
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
GHSA-rvmp-6gcj-rjrw- Updated
- 2026-11-02
OSVBELL-CVE-2013-2546
CVE-2013-2546 does not affect BellSoft software
- Record
BELL-CVE-2013-2546- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSV No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
CVE-2013-2546- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2546 No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
DEBIAN-CVE-2013-2546- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2546 No score
The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows local users to obtain sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability.
- Record
UBUNTU-CVE-2013-2546- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.2.41-1 | 3.2.41-1 |
linuxDebian:13 |
before 3.2.41-1 | 3.2.41-1 |
linuxDebian:14 |
before 3.2.41-1 | 3.2.41-1 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
mrg-rt-releaseRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 21 CVEs |
before 0:3.6.11.2-rt33.39.el6rt | 0:3.6.11.2-rt33.39.el6rt |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2546 is a low vulnerability (CVSS 2.1) in Linux Kernel, published March 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in linux 3.2.41-1.
References
ubuntu.com/usn/USN-1796-1
github.com/torvalds/linux/commit/9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9a5467bf7b6e9e02ec9c3da4e23747c05faeaac6
mandriva.com/security/advisories?name=MDVSA-2013:176
openwall.com/lists/oss-security/2013/03/05/13
Show 106 moreShow less
lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
nvd.nist.gov/vuln/detail/CVE-2013-2546
docs.bell-sw.com/security/cves/CVE-2013-2546
security-tracker.debian.org/tracker/CVE-2013-2546
access.redhat.com/errata/RHSA-2013:0829
rhn.redhat.com/errata/RHBA-2012-0044.html
bugzilla.redhat.com/show_bug.cgi?id=915592
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0829.json
cve.org/CVERecord?id=CVE-2013-0913
cisa.gov/known-exploited-vulnerabilities-catalog
ubuntu.com/security/CVE-2013-2546