CVE-2013-3226

CVE-2013-3226 describes an information disclosure vulnerability in the Linux kernel's Bluetooth SCO socket implementation (sco_sock_recvmsg function). This flaw, present in versions prior to 3.9-rc7, allows local users to expose sensitive kernel stack memory data through specially crafted recvmsg or recvfrom system calls. With a CVSS score of 4.9 and an AV:L/AC:L/Au:N/C:C/I:N/A:N vector, it indicates a local attack with low complexity leading to complete confidentiality compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted or discussed vulnerability.