CVE-2013-2852

medium

Published 2013-06-07 · Modified 2026-04-29

CVSS v3

—

CVSS v2

6.9

VIR risk

6.9

Description

Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-2852

OS impact

OS	Version	Status	Fixed in
debian	bookworm	fixed	`3.9.8-1`
debian	bullseye	fixed	`3.9.8-1`
debian	forky	fixed	`3.9.8-1`
debian	sid	fixed	`3.9.8-1`
debian	trixie	fixed	`3.9.8-1`
debian	6.0	affected
ubuntu	10.04	affected
ubuntu	12.04	affected
ubuntu	12.10	affected
ubuntu	13.04	affected
linux-kernel		affected	`3.0.83`

References

CWEs

CWE-134

Verify integrity in audit chain (admin only). AS-IS.