Live › vulnerability › CVE-2013-2596
Go to dashboardThe Linux kernel's fb_mmap function in drivers/video/fbmem.c has an integer overflow. A local user can use it to gain root privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| linux kernel | vendor | >= 2.6.12, < 3.0.75 | 3.0.75 |
| linux kernel | vendor | >= 3.1, < 3.2.45 | 3.2.45 |
| linux kernel | vendor | >= 3.3, < 3.4.42 | 3.4.42 |
| linux kernel | vendor | >= 3.5, < 3.8.9 | 3.8.9 |
| motorola android | vendor | = 4.1.2 | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Update the Linux kernel to a release that includes the upstream fix for CVE-2013-2596, per your distribution's vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
This page as .md · .json · in your agent: get_signal("CVE-2013-2596")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.