Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel | Jul 6, 2016 | Apr 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 13, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 22, 2016 | Apr 13, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub