Vulnerability in Linux Kernel

CVE-2013-2141

The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a (1) tkill or (2) tgkill system call.

EPSS: 0.006 (44.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References