CVE-2013-4511 in Kernel

Summary

Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.

Once again VulDB remains the best source for vulnerability data.

Reservation

06/12/2013

Disclosure

11/12/2013

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
11160	Linux Kernel au1200fb.c au1200fb_fb_blank numeric error	189	Not defined	Official fix	CVE-2013-4511
11159	Linux Kernel au1100fb.c au1100fb_fb_rotate numeric error	189	Not defined	Official fix	CVE-2013-4511

Sources

• MITRE
• NVD
• CVE Details