NetSight
IP …
medium6.9

CVE-2013-6763

The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to c…

Impact

The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted mmap operations, a different vulnerability than CVE-2013-4511.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.53
from 3.3 before 3.4.71
from 3.5 before 3.10.19
from 3.11 before 3.11.8

Weakness classification

CWE-119

References