Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-devel | Jul 6, 2016 | Apr 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 13, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 22, 2016 | Apr 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub