CVE-2013-2596Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to crea…
Updated under an hour ago ()
Does this affect you?
It affects linux_kernel and 1 other product. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Sep 15, 2022; federal agencies had to remediate by Oct 6, 2022. Treat that date as your deadline.
Do this next
Free account, 1 product
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
- CVSS
- 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-190
- Known exploited
- Added to CISA KEV Sep 15, 2022; federal remediation due Oct 6, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 3.21% (percentile 88)
- Assigned by
- mitre
- NVD analysis
- Analyzed
- Record last updated
- Oct 22, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
linux linux_kernel linux:linux_kernel | from 2.6.12 before 3.0.75; from 3.1 before 3.2.45; from 3.3 before 3.4.42; from 3.5 before 3.8.9 | NVD |
motorola android motorola:android | 4.1.2 | NVD |
References
- http://rhn.redhat.com/errata/RHSA-2015-0695.htmlvendor-advisory, x-refsource-redhat, third-party-advisory
- http://www.securityfocus.com/bid/59264vdb-entry, x-refsource-bid, broken-link, third-party-advisory
- http://www.droid-life.com/2013/04/09/root-method-released-for-droid-razr-hd-running-android-4-1-2-other-devices-too/x-refsource-misc, exploit, issue-tracking, third-party-advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:176vendor-advisory, x-refsource-mandriva, broken-link
- http://marc.info/?l=linux-kernel&m=136616837923938&w=2mailing-list, x-refsource-mlist, patch, third-party-advisory
- https://github.com/torvalds/linux/commit/b4cbb197c7e7a68dbad0d491242e3ca67420c13ex-refsource-confirm, patch
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlx-refsource-confirm, patch, third-party-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b4cbb197c7e7a68dbad0d491242e3ca67420c13ex-refsource-confirm, broken-link
- http://rhn.redhat.com/errata/RHSA-2015-0803.htmlvendor-advisory, x-refsource-redhat, third-party-advisory
- http://forum.xda-developers.com/showthread.php?t=2255491x-refsource-misc, exploit
- http://www.droidrzr.com/index.php/topic/15208-root-motochopper-yet-another-android-root-exploit/x-refsource-misc, exploit, issue-tracking
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9x-refsource-confirm, mailing-list, release-notes
- http://rhn.redhat.com/errata/RHSA-2015-0782.htmlvendor-advisory, x-refsource-redhat, third-party-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761x-refsource-confirm, third-party-advisory
- https://github.com/torvalds/linux/commit/fc9bbca8f650e5f738af8806317c0a041a48ae4ax-refsource-confirm, exploit, patch
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc9bbca8f650e5f738af8806317c0a041a48ae4ax-refsource-confirm, broken-link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2596us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.