CVE-2013-2596: Linux Kernel Integer Overflow Vulnerability
Integer overflow in the fbmmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
Other sources
Linux kernel fbmmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.
— CISA
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2596?
CVE-2013-2596 has a medium severity rating due to its potential to allow local users to create risky memory mappings.
How do I fix CVE-2013-2596?
To address CVE-2013-2596, you should upgrade your Linux kernel to version 3.8.9 or later.
Which systems are affected by CVE-2013-2596?
CVE-2013-2596 affects Linux kernels prior to 3.8.9 and specific builds of Motorola's Android 4.1.2.
What risks are associated with CVE-2013-2596?
The vulnerability could allow local users to access and modify the entire kernel memory, which can lead to privilege escalation.
Is it safe to use an old version of the Linux kernel because of CVE-2013-2596?
Using an old version of the Linux kernel that is vulnerable to CVE-2013-2596 is not safe, as it exposes your system to potential exploitations.