Back to KEVs

CVE-2013-2596

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android...

Basic Information

CVE State
PUBLISHED
Reserved Date
March 15, 2013
Published Date
April 13, 2013
Last Updated
February 07, 2025
Vendor
Linux
Product
Linux Kernel
Description
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
Tags
linux android cisa

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2022-09-15 00:00:00 UTC) Source

References

http://rhn.redhat.com/errata/RHSA-2015-0695.html http://www.securityfocus.com/bid/59264 http://www.droid-life.com/2013/04/09/root-method-released-for-droid-razr-hd-running-android-4-1-2-other-devices-too/ http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://marc.info/?l=linux-kernel&m=136616837923938&w=2 https://github.com/torvalds/linux/commit/b4cbb197c7e7a68dbad0d491242e3ca67420c13e http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4cbb197c7e7a68dbad0d491242e3ca67420c13e http://rhn.redhat.com/errata/RHSA-2015-0803.html http://forum.xda-developers.com/showthread.php?t=2255491 http://www.droidrzr.com/index.php/topic/15208-root-motochopper-yet-another-android-root-exploit/ http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 http://rhn.redhat.com/errata/RHSA-2015-0782.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 https://github.com/torvalds/linux/commit/fc9bbca8f650e5f738af8806317c0a041a48ae4a http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc9bbca8f650e5f738af8806317c0a041a48ae4a

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-09-15 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel