CVE-2013-3236

CVE-2013-3236 is a local information disclosure vulnerability affecting the Linux kernel before version 3.9-rc7. It stems from improper initialization of a length variable in the vmci_transport_dgram_dequeue function, allowing local users to leak sensitive kernel stack memory via crafted recvmsg or recvfrom system calls. With a CVSS score of 4.9, this vulnerability is of medium severity, requiring local access and low attack complexity to achieve a complete confidentiality impact. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.