imPC@ndo IT

Tracker / CVE-2013-4511

CVE-2013-4511

Medium 6.9

Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.

Affected products and versions

linux linux_kernel · 2.6.12 → 3.2.53
linux linux_kernel · 3.11 → 3.11.8
linux linux_kernel · 3.3 → 3.4.69
linux linux_kernel · 3.5 → 3.10.19

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References