Is CVE-2013-6282 being actively exploited?

Yes. CVE-2013-6282 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on September 15, 2022.

What is the CVSS score for CVE-2013-6282?

CVE-2013-6282 has a CVSS 3.1 base score of 8.8 (HIGH).

CVE-2013-6282

HIGH · CVSS 8.8CISA KEV: actively exploitedEPSS 39.7%EU EUVD: exploited

The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.

Key facts

CVSS score: 8.8 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-20
EPSS score: 39.7% (99th percentile)
In CISA KEV: Yes, added September 15, 2022
In EU EUVD: Yes (EUVD-2013-6110)
Published: November 20, 2013
NVD last modified: June 17, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Added to the KEV catalog on September 15, 2022; federal remediation due October 6, 2022.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2013-6110 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on October 22, 2025.

View on the EU Vulnerability Database

Affected products

linux / linux kernel

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8404663f81d212918ff85f493649a7991209fa04(Patch)
http://www.codeaurora.org/projects/security-advisories/missing-access-checks-putusergetuser-kernel-api-cve-2013-6282(Patch)
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5(Mailing List, Vendor Advisory)
http://www.openwall.com/lists/oss-security/2013/11/14/11(Mailing List)
http://www.securityfocus.com/bid/63734(Third Party Advisory, VDB Entry)
http://www.ubuntu.com/usn/USN-2067-1(Third Party Advisory, VDB Entry)
https://github.com/torvalds/linux/commit/8404663f81d212918ff85f493649a7991209fa04(Exploit, Patch)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-6282(US Government Resource)
https://www.exploit-db.com/exploits/40975/(Exploit, Third Party Advisory, VDB Entry)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain