Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-xen-devel | Jul 6, 2016 | Apr 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 13, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 22, 2016 | Apr 13, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub