{"cvss":0.0,"datePublished":"2022-09-15","dateUpdated":"2022-09-15","description":"The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.","dueDate":"2022-10-06","id":"CVE-2013-6282","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8404663f81d212918ff85f493649a7991209fa04; https://nvd.nist.gov/vuln/detail/CVE-2013-6282","product":"Kernel","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Linux Kernel Improper Input Validation Vulnerability","vendor":"Linux"}