CVE-2013-2164

CVE-2013-2164 describes an information disclosure vulnerability in the Linux kernel, specifically within the mmc_ioctl_cdrom_read_data function, affecting various Linux distributions including Red Hat Enterprise Linux. A local attacker could exploit this flaw by performing a read operation on a malfunctioning CD-ROM drive to potentially extract sensitive data from kernel memory. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N), this vulnerability is considered low severity, requiring local access and user interaction (malfunctioning drive) for a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.