CVE-2013-4579

Linux kernel < 3.12 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-4579. PoCs published by Mathy Vanhoef.

AI-analyzed exploit summary This exploit leverages a bit-flipping technique to disclose the original MAC address of a target device by injecting probe packets and monitoring ACK responses. It uses Scapy to craft and sniff 802.11 frames, exploiting the Linux kernel's handling of wireless frames to leak sensitive information.

Description

The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Mathy Vanhoef · pythonremotelinux
https://www.exploit-db.com/exploits/38826

This exploit leverages a bit-flipping technique to disclose the original MAC address of a target device by injecting probe packets and monitoring ACK responses. It uses Scapy to craft and sniff 802.11 frames, exploiting the Linux kernel's handling of wireless frames to leak sensitive information.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Linux Kernel (with Atheros wireless drivers, though broader impact is implied)
No auth needed
Prerequisites: Proximity to target wireless network · Wireless interface capable of injection/monitoring · Scapy and Python environment
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2135-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2138-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2141-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2136-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2139-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2134-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2133-1
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2113-1
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/11/15/3
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2117-1
Various Sources mailing-list x_refsource_mlist
https://lists.ath9k.org/pipermail/ath9k-devel/2013-November/012215.html

Scores

EPSS 0.1021
EPSS Percentile 95.1%

Details

CWE
CWE-310
Status published
Products (44)
linux/linux_kernel 3.0 rc1 (7 CPE variants)
linux/linux_kernel 3.0.1
linux/linux_kernel 3.0.2
linux/linux_kernel 3.0.3
linux/linux_kernel 3.0.4
linux/linux_kernel 3.0.5
linux/linux_kernel 3.0.6
linux/linux_kernel 3.0.7
linux/linux_kernel 3.0.8
linux/linux_kernel 3.0.9
... and 34 more
Published Nov 20, 2013
Tracked Since Feb 18, 2026