CVE-2013-7263: Input Validation

Linux kernel built with the networking support(CONFIGNET), is vulnerable to a memory leakage flaw. It occurs while doing the recvmsg(2), recvfrom(2), recvmmsg(2) socket calls.

A user/program could use this flaw to leak kernel memory bytes.

Upstream fix: ------------- -> https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=bceaa90240b6019ed73b49965eac7d167610be69

-> https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=85fbaa75037d0b6b786ff18658ddf0b4014ce2a4

Original 'CVE-2013-6405' assigned to this issue has been rejected and the following 4 have been assigned for the same:

- CVE-2013-7263 (net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c), - CVE-2013-7264 (net/l2tp/l2tpip.c), - CVE-2013-7265 (net/phonet/datagram.c) - CVE-2013-7281 (net/ieee802154/dgram.c)

=== Name: CVE-2013-6405

REJECT

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-7263, CVE-2013-7264, CVE-2013-7265. Reason: This candidate is a duplicate of CVE-2013-7263, CVE-2013-7264, and CVE-2013-7265. Notes: All CVE users should reference CVE-2013-7263, CVE-2013-7264, and/or CVE-2013-7265 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. ===

— Red Hat

The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.