NetSight
IP …
medium6.9

CVE-2013-4511

Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the …

Impact

Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12 before 3.2.53
from 3.3 before 3.4.69
from 3.5 before 3.10.19
from 3.11 before 3.11.8

Weakness classification

CWE-189

References