EXPOSURES › CVE-2013-6282
CVE-2013-6282
HIGH ⌖ ON CISA KEV · EXPLOITEDLinux Kernel CVE-2013-6282 exposed to active exploitation on ARM v6k/v7, enabling unauthorized memory access and privilege escalation.
A critical vulnerability in the Linux Kernel's get_user and put_user API functions, when used on ARM v6k/v7 platforms, was actively exploited, allowing attackers to read and write kernel memory, potentially leading to a complete system takeover. This highlights a severe security flaw in widely-used kernel components that could have significant implications for DIB systems.
Shame score — Active exploitation of a critical kernel vulnerability in a widely-used operating system, leading to potential unauthorized system access and control.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.