NetSight
high7.8

CVE-2013-7445

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows con…

Impact

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 4.0.0
Versions 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Weakness classification

References