$ cve CVE-2013-1763 JSON

CVE-2013-1763 EXPLOIT

7.2

HIGH · CVSS 2.0 · EPSS 4.2% (pctl 91)

Patch early

A public exploit exists.

Description

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a Netlink message.

Scoring

CVSS	7.2 (HIGH, v2.0)
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS	4.21% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2013-02-28
Last modified	2026-06-16

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation	2015-08-26
exploit-db	Linux Kernel 3.7.10 (Ubuntu 12.10 x64) - 'sock_diag_handlers' Local Privilege Escalation (2)	2013-03-13
exploit-db	Linux Kernel 3.3.x < 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)	2013-02-27
exploit-db	Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)	2013-02-24

References

→ the Explorer · watch your stack · NVD