What is CVE-2013-6282?

CVE-2013-6282 is a High severity Linux kernel vulnerability with a CVSS score of 8.8 out of 10, classified as a Improper Input Validation flaw (CWE-20). CVE-2013-6282 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild.

What is the CVSS score for CVE-2013-6282?

CVE-2013-6282 has a CVSS score of 8.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2013-6282?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2013-6282 patch availability.

Is CVE-2013-6282 actively exploited?

Yes. CVE-2013-6282 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild with a CVSS score of 8.8 (High severity).

CVE-2013-6282

High KEV — Actively Exploited

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.

Package Linux Kernel

Published 2013-11-20

Last modified 2026-04-22

CVSS version 3.1

Patch available

Awaiting data

CVSS 3.1 score

8.8

out of 10

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-20

CVE-2013-6282 is a Improper Input Validation vulnerability

What is Improper Input Validation?

The product receives input but does not validate it correctly, allowing attackers to craft inputs that cause unexpected behavior. Learn more on MITRE CWE

References

9 total

GitHub
https://github.com/torvalds/linux/commit/8404663f81d212918ff85f493649a7991209fa04

Exploit Patch
Exploit-DB
https://www.exploit-db.com/exploits/40975/

Exploit Third Party Advisory VDB Entry
Kernel.org
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5

Mailing List Vendor Advisory
CISA
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-6282

US Government Resource
Kernel Git
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8404663f81d212918ff85f493649a7991209fa04

Patch

Showing 5 of 9 references View all on NVD

Details

CVE ID CVE-2013-6282

Severity High

CVSS score 8.8 / 10

CVSS version 3.1

Published 2013-11-20

Modified 2026-04-22

KEV Yes

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2013-6282?

CVE-2013-6282 is a High severity Linux kernel vulnerability with a CVSS score of 8.8 out of 10 , classified as an Improper Input Validation flaw (CWE-20) . CVE-2013-6282 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild.
What is the CVSS score for CVE-2013-6282?

CVE-2013-6282 has a CVSS score of 8.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2013-6282?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2013-6282 patch availability.
Is CVE-2013-6282 actively exploited?

Yes. CVE-2013-6282 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. It carries a CVSS score of 8.8 (High severity).