CVE-2013-6392
Summary
| CVE | CVE-2013-6392 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-11-30 02:55:04 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The genlock_dev_ioctl function in genlock.c in the Genlock driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted GENLOCK_IOC_EXPORT ioctl call. |
Risk And Classification
Primary CVSS: v2.0 4.9 from [email protected]
AV:L/AC:L/Au:N/C:C/I:N/A:N
EPSS: 0.001110000 probability, percentile 0.291900000 (date 2026-04-29)
Problem Types: CWE-399 | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:C/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Codeaurora | Android-msm | 3.10.22 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.23 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.24 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.25 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.26 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.27 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.28 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.10.29 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.10 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.3 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.4 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.5 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.6 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.7 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.8 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.12.9 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc1 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc2 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc3 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc4 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc5 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc6 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc7 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13 | rc8 | All | All |
| Operating System | Codeaurora | Android-msm | 3.13.1 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.13.2 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.14 | rc1 | All | All |
| Operating System | Codeaurora | Android-msm | 3.14 | rc2 | All | All |
| Operating System | Codeaurora | Android-msm | 3.2.54 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.72 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.73 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.74 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.75 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.76 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.77 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.78 | All | All | All |
| Operating System | Codeaurora | Android-msm | 3.4.79 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| kernel/msm - Kernel Tree for MSM/QSD family and Android on MSM/QSD | af854a3a-2127-422b-91ae-364da2661108 | www.codeaurora.org | Patch |
| oss-security - Re: CVE request: Kernel MSM - Memory leak in drivers/base/genlock.c | af854a3a-2127-422b-91ae-364da2661108 | openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.