CVE-2013-2635

CVE-2013-2635 describes an information disclosure vulnerability in the Linux kernel, specifically within the rtnl_fill_ifinfo function, affecting versions prior to 3.8.4. This flaw allows local users to potentially extract sensitive data from kernel stack memory due to an uninitialized structure member. With a CVSS score of 1.9, it is considered low severity, requiring local access and moderate attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.