CVE-2013-1772: Linux Kernel

Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days.

The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call.

Affected products

• Linux Linux Kernel: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …

Published 2013-02-28. Last modified 2026-06-16.