Candidate: CVE-2013-2596 PublicDate: 2013-04-13 02:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2596 http://forum.xda-developers.com/showthread.php?t=2255491 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b4cbb197c7e7a68dbad0d491242e3ca67420c13e http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=fc9bbca8f650e5f738af8806317c0a041a48ae4a http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 http://marc.info/?l=linux-kernel&m=136616837923938&w=2 http://rhn.redhat.com/errata/RHSA-2015-0695.html http://rhn.redhat.com/errata/RHSA-2015-0782.html http://rhn.redhat.com/errata/RHSA-2015-0803.html http://www.droid-life.com/2013/04/09/root-method-released-for-droid-razr-hd-running-android-4-1-2-other-devices-too/ http://www.droidrzr.com/index.php/topic/15208-root-motochopper-yet-another-android-root-exploit/ http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.9 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html https://github.com/torvalds/linux/commit/b4cbb197c7e7a68dbad0d491242e3ca67420c13e https://github.com/torvalds/linux/commit/fc9bbca8f650e5f738af8806317c0a041a48ae4a Description: Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program. Ubuntu-Description: Notes: sbeattie> requires write access to /dev/fb0 and other devices, which is usually on permitted to root and the video group. Mitigation: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_linux: break-fix: - b4cbb197c7e7a68dbad0d491242e3ca67420c13e break-fix: - fc9bbca8f650e5f738af8806317c0a041a48ae4a upstream_linux: released (3.9~rc8) precise/esm_linux: released (3.2.0-48.74) trusty_linux: ignored (out of standard support) trusty/esm_linux: not-affected (3.11.0-12.19) xenial_linux: not-affected (4.2.0-16.19) esm-infra/xenial_linux: not-affected (4.2.0-16.19) bionic_linux: not-affected (4.13.0-16.19) eoan_linux: not-affected (5.0.0-13.14) focal_linux: not-affected (5.4.0-9.12) groovy_linux: not-affected (5.4.0-26.30) devel_linux: not-affected (5.8.0-34.37+21.04.1) Patches_linux-hwe: upstream_linux-hwe: released (3.9~rc8) precise/esm_linux-hwe: DNE trusty_linux-hwe: DNE trusty/esm_linux-hwe: DNE xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1) esm-infra/xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1) bionic_linux-hwe: not-affected (4.18.0-13.14~18.04.1) eoan_linux-hwe: DNE focal_linux-hwe: DNE groovy_linux-hwe: DNE devel_linux-hwe: DNE Patches_linux-hwe-edge: upstream_linux-hwe-edge: released (3.9~rc8) precise/esm_linux-hwe-edge: DNE trusty_linux-hwe-edge: DNE trusty/esm_linux-hwe-edge: DNE xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life) esm-infra/xenial_linux-hwe-edge: ignored (was needs-triage now end-of-life) bionic_linux-hwe-edge: ignored (was needs-triage now end-of-life) eoan_linux-hwe-edge: DNE focal_linux-hwe-edge: DNE groovy_linux-hwe-edge: DNE devel_linux-hwe-edge: DNE Patches_linux-lts-trusty: upstream_linux-lts-trusty: released (3.9~rc8) precise/esm_linux-lts-trusty: not-affected (3.13.0-24.46~precise1) trusty_linux-lts-trusty: DNE trusty/esm_linux-lts-trusty: DNE xenial_linux-lts-trusty: DNE bionic_linux-lts-trusty: DNE eoan_linux-lts-trusty: DNE focal_linux-lts-trusty: DNE groovy_linux-lts-trusty: DNE devel_linux-lts-trusty: DNE Patches_linux-lts-xenial: upstream_linux-lts-xenial: released (3.9~rc8) precise/esm_linux-lts-xenial: DNE trusty_linux-lts-xenial: ignored (out of standard support) trusty/esm_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1) xenial_linux-lts-xenial: DNE bionic_linux-lts-xenial: DNE eoan_linux-lts-xenial: DNE focal_linux-lts-xenial: DNE groovy_linux-lts-xenial: DNE devel_linux-lts-xenial: DNE Patches_linux-kvm: upstream_linux-kvm: released (3.9~rc8) precise/esm_linux-kvm: DNE trusty_linux-kvm: DNE trusty/esm_linux-kvm: DNE xenial_linux-kvm: not-affected (4.4.0-1004.9) esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9) bionic_linux-kvm: not-affected (4.15.0-1002.2) eoan_linux-kvm: not-affected (5.0.0-1004.4) focal_linux-kvm: not-affected (5.4.0-1004.4) groovy_linux-kvm: not-affected (5.4.0-1009.9) devel_linux-kvm: not-affected (5.8.0-1010.11+21.04.1) Patches_linux-aws: upstream_linux-aws: released (3.9~rc8) precise/esm_linux-aws: DNE trusty_linux-aws: ignored (out of standard support) trusty/esm_linux-aws: not-affected (4.4.0-1002.2) xenial_linux-aws: not-affected (4.4.0-1001.10) esm-infra/xenial_linux-aws: not-affected (4.4.0-1001.10) bionic_linux-aws: not-affected (4.15.0-1001.1) eoan_linux-aws: not-affected (5.0.0-1004.4) focal_linux-aws: not-affected (5.4.0-1005.5) groovy_linux-aws: not-affected (5.4.0-1009.9) devel_linux-aws: not-affected (5.8.0-1017.18+21.04.2) Patches_linux-aws-5.0: upstream_linux-aws-5.0: released (3.9~rc8) precise/esm_linux-aws-5.0: DNE trusty_linux-aws-5.0: DNE trusty/esm_linux-aws-5.0: DNE xenial_linux-aws-5.0: DNE bionic_linux-aws-5.0: ignored (was needs-triage now end-of-life) eoan_linux-aws-5.0: DNE focal_linux-aws-5.0: DNE groovy_linux-aws-5.0: DNE devel_linux-aws-5.0: DNE Patches_linux-aws-5.3: upstream_linux-aws-5.3: released (3.9~rc8) precise/esm_linux-aws-5.3: DNE trusty_linux-aws-5.3: DNE trusty/esm_linux-aws-5.3: DNE xenial_linux-aws-5.3: DNE bionic_linux-aws-5.3: not-affected (5.3.0-1016.17~18.04.1) eoan_linux-aws-5.3: DNE focal_linux-aws-5.3: DNE groovy_linux-aws-5.3: DNE devel_linux-aws-5.3: DNE Patches_linux-aws-hwe: upstream_linux-aws-hwe: released (3.9~rc8) precise/esm_linux-aws-hwe: DNE trusty_linux-aws-hwe: DNE trusty/esm_linux-aws-hwe: DNE xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1) esm-infra/xenial_linux-aws-hwe: not-affected (4.15.0-1030.31~16.04.1) bionic_linux-aws-hwe: DNE eoan_linux-aws-hwe: DNE focal_linux-aws-hwe: DNE groovy_linux-aws-hwe: DNE devel_linux-aws-hwe: DNE Patches_linux-azure: upstream_linux-azure: released (3.9~rc8) precise/esm_linux-azure: DNE trusty_linux-azure: ignored (out of standard support) trusty/esm_linux-azure: not-affected (4.15.0-1023.24~14.04.1) xenial_linux-azure: not-affected (4.11.0-1009.9) esm-infra/xenial_linux-azure: not-affected (4.11.0-1009.9) bionic_linux-azure: ignored (was needs-triage now end-of-life) eoan_linux-azure: not-affected (5.0.0-1004.4) focal_linux-azure: not-affected (5.4.0-1006.6) groovy_linux-azure: not-affected (5.4.0-1010.10) devel_linux-azure: not-affected (5.8.0-1016.17+21.04.1) Patches_linux-azure-4.15: upstream_linux-azure-4.15: released (3.9~rc8) precise/esm_linux-azure-4.15: DNE trusty_linux-azure-4.15: DNE trusty/esm_linux-azure-4.15: DNE xenial_linux-azure-4.15: DNE bionic_linux-azure-4.15: not-affected (4.15.0-1082.92) eoan_linux-azure-4.15: DNE focal_linux-azure-4.15: DNE groovy_linux-azure-4.15: DNE devel_linux-azure-4.15: DNE Patches_linux-azure-5.3: upstream_linux-azure-5.3: released (3.9~rc8) precise/esm_linux-azure-5.3: DNE trusty_linux-azure-5.3: DNE trusty/esm_linux-azure-5.3: DNE xenial_linux-azure-5.3: DNE bionic_linux-azure-5.3: not-affected (5.3.0-1007.8~18.04.1) eoan_linux-azure-5.3: DNE focal_linux-azure-5.3: DNE groovy_linux-azure-5.3: DNE devel_linux-azure-5.3: DNE Patches_linux-azure-edge: upstream_linux-azure-edge: released (3.9~rc8) precise/esm_linux-azure-edge: DNE trusty_linux-azure-edge: DNE trusty/esm_linux-azure-edge: DNE xenial_linux-azure-edge: DNE bionic_linux-azure-edge: ignored (was needs-triage now end-of-life) eoan_linux-azure-edge: DNE focal_linux-azure-edge: DNE groovy_linux-azure-edge: DNE devel_linux-azure-edge: DNE Patches_linux-gcp: upstream_linux-gcp: released (3.9~rc8) precise/esm_linux-gcp: DNE trusty_linux-gcp: DNE trusty/esm_linux-gcp: DNE xenial_linux-gcp: not-affected (4.10.0-1004.4) esm-infra/xenial_linux-gcp: not-affected (4.10.0-1004.4) bionic_linux-gcp: ignored (was needs-triage now end-of-life) eoan_linux-gcp: not-affected (5.0.0-1004.4) focal_linux-gcp: not-affected (5.4.0-1005.5) groovy_linux-gcp: not-affected (5.4.0-1009.9) devel_linux-gcp: not-affected (5.8.0-1015.15+21.04.1) Patches_linux-gcp-5.3: upstream_linux-gcp-5.3: released (3.9~rc8) precise/esm_linux-gcp-5.3: DNE trusty_linux-gcp-5.3: DNE trusty/esm_linux-gcp-5.3: DNE xenial_linux-gcp-5.3: DNE bionic_linux-gcp-5.3: not-affected (5.3.0-1008.9~18.04.1) eoan_linux-gcp-5.3: DNE focal_linux-gcp-5.3: DNE groovy_linux-gcp-5.3: DNE devel_linux-gcp-5.3: DNE Patches_linux-gcp-edge: upstream_linux-gcp-edge: released (3.9~rc8) precise/esm_linux-gcp-edge: DNE trusty_linux-gcp-edge: DNE trusty/esm_linux-gcp-edge: DNE xenial_linux-gcp-edge: DNE bionic_linux-gcp-edge: ignored (was needs-triage now end-of-life) eoan_linux-gcp-edge: DNE focal_linux-gcp-edge: DNE groovy_linux-gcp-edge: DNE devel_linux-gcp-edge: DNE Patches_linux-gke-4.15: upstream_linux-gke-4.15: released (3.9~rc8) precise/esm_linux-gke-4.15: DNE trusty_linux-gke-4.15: DNE trusty/esm_linux-gke-4.15: DNE xenial_linux-gke-4.15: DNE bionic_linux-gke-4.15: not-affected (4.15.0-1030.32) eoan_linux-gke-4.15: DNE focal_linux-gke-4.15: DNE groovy_linux-gke-4.15: DNE devel_linux-gke-4.15: DNE Patches_linux-gke-5.0: upstream_linux-gke-5.0: released (3.9~rc8) precise/esm_linux-gke-5.0: DNE trusty_linux-gke-5.0: DNE trusty/esm_linux-gke-5.0: DNE xenial_linux-gke-5.0: DNE bionic_linux-gke-5.0: not-affected (5.0.0-1011.11~18.04.1) eoan_linux-gke-5.0: DNE focal_linux-gke-5.0: DNE groovy_linux-gke-5.0: DNE devel_linux-gke-5.0: DNE Patches_linux-gke-5.3: upstream_linux-gke-5.3: released (3.9~rc8) precise/esm_linux-gke-5.3: DNE trusty_linux-gke-5.3: DNE trusty/esm_linux-gke-5.3: DNE xenial_linux-gke-5.3: DNE bionic_linux-gke-5.3: not-affected (5.3.0-1011.12~18.04.1) eoan_linux-gke-5.3: DNE focal_linux-gke-5.3: DNE groovy_linux-gke-5.3: DNE devel_linux-gke-5.3: DNE Patches_linux-oracle: upstream_linux-oracle: released (3.9~rc8) precise/esm_linux-oracle: DNE trusty_linux-oracle: DNE trusty/esm_linux-oracle: DNE xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1) esm-infra/xenial_linux-oracle: not-affected (4.15.0-1007.9~16.04.1) bionic_linux-oracle: not-affected (4.15.0-1007.9) eoan_linux-oracle: not-affected (4.15.0-1011.13) focal_linux-oracle: not-affected (5.4.0-1005.5) groovy_linux-oracle: not-affected (5.4.0-1009.9) devel_linux-oracle: not-affected (5.8.0-1014.14+21.04.1) Patches_linux-oracle-5.0: upstream_linux-oracle-5.0: released (3.9~rc8) precise/esm_linux-oracle-5.0: DNE trusty_linux-oracle-5.0: DNE trusty/esm_linux-oracle-5.0: DNE xenial_linux-oracle-5.0: DNE bionic_linux-oracle-5.0: ignored (was needs-triage now end-of-life) eoan_linux-oracle-5.0: DNE focal_linux-oracle-5.0: DNE groovy_linux-oracle-5.0: DNE devel_linux-oracle-5.0: DNE Patches_linux-oracle-5.3: upstream_linux-oracle-5.3: released (3.9~rc8) precise/esm_linux-oracle-5.3: DNE trusty_linux-oracle-5.3: DNE trusty/esm_linux-oracle-5.3: DNE xenial_linux-oracle-5.3: DNE bionic_linux-oracle-5.3: not-affected (5.3.0-1011.12~18.04.1) eoan_linux-oracle-5.3: DNE focal_linux-oracle-5.3: DNE groovy_linux-oracle-5.3: DNE devel_linux-oracle-5.3: DNE Patches_linux-oem: upstream_linux-oem: released (3.9~rc8) precise/esm_linux-oem: DNE trusty_linux-oem: DNE trusty/esm_linux-oem: DNE xenial_linux-oem: ignored (was needs-triage now end-of-life) bionic_linux-oem: not-affected (4.15.0-1002.3) eoan_linux-oem: not-affected (4.15.0-1035.40) focal_linux-oem: DNE groovy_linux-oem: DNE devel_linux-oem: DNE Patches_linux-oem-5.6: upstream_linux-oem-5.6: released (3.9~rc8) precise/esm_linux-oem-5.6: DNE trusty_linux-oem-5.6: DNE trusty/esm_linux-oem-5.6: DNE xenial_linux-oem-5.6: DNE bionic_linux-oem-5.6: DNE eoan_linux-oem-5.6: DNE focal_linux-oem-5.6: not-affected (5.6.0-1007.7) groovy_linux-oem-5.6: DNE devel_linux-oem-5.6: DNE Patches_linux-oem-osp1: upstream_linux-oem-osp1: released (3.9~rc8) precise/esm_linux-oem-osp1: DNE trusty_linux-oem-osp1: DNE trusty/esm_linux-oem-osp1: DNE xenial_linux-oem-osp1: DNE bionic_linux-oem-osp1: not-affected (5.0.0-1010.11) eoan_linux-oem-osp1: not-affected (5.0.0-1010.11) focal_linux-oem-osp1: DNE groovy_linux-oem-osp1: DNE devel_linux-oem-osp1: DNE Patches_linux-raspi: upstream_linux-raspi: released (3.9~rc8) precise/esm_linux-raspi: DNE trusty_linux-raspi: DNE trusty/esm_linux-raspi: DNE xenial_linux-raspi: DNE bionic_linux-raspi: DNE eoan_linux-raspi: DNE focal_linux-raspi: not-affected (5.4.0-1007.7) groovy_linux-raspi: not-affected (5.4.0-1008.8) devel_linux-raspi: not-affected (5.8.0-1008.11+21.04.1) Patches_linux-raspi2: upstream_linux-raspi2: released (3.9~rc8) precise/esm_linux-raspi2: DNE trusty_linux-raspi2: DNE trusty/esm_linux-raspi2: DNE xenial_linux-raspi2: not-affected (4.2.0-1013.19) bionic_linux-raspi2: not-affected (4.13.0-1005.5) eoan_linux-raspi2: not-affected (5.0.0-1006.6) focal_linux-raspi2: ignored (was needs-triage now end-of-life) groovy_linux-raspi2: DNE devel_linux-raspi2: DNE Patches_linux-raspi2-5.3: upstream_linux-raspi2-5.3: released (3.9~rc8) precise/esm_linux-raspi2-5.3: DNE trusty_linux-raspi2-5.3: DNE trusty/esm_linux-raspi2-5.3: DNE xenial_linux-raspi2-5.3: DNE bionic_linux-raspi2-5.3: not-affected (5.3.0-1017.19~18.04.1) eoan_linux-raspi2-5.3: DNE focal_linux-raspi2-5.3: DNE groovy_linux-raspi2-5.3: DNE devel_linux-raspi2-5.3: DNE Patches_linux-riscv: upstream_linux-riscv: released (3.9~rc8) precise/esm_linux-riscv: DNE trusty_linux-riscv: DNE trusty/esm_linux-riscv: DNE xenial_linux-riscv: DNE bionic_linux-riscv: DNE eoan_linux-riscv: DNE focal_linux-riscv: not-affected (5.4.0-24.28) groovy_linux-riscv: not-affected (5.4.0-24.28) devel_linux-riscv: not-affected (5.8.0-10.12+21.04.1) Patches_linux-snapdragon: upstream_linux-snapdragon: released (3.9~rc8) precise/esm_linux-snapdragon: DNE trusty_linux-snapdragon: DNE trusty/esm_linux-snapdragon: DNE xenial_linux-snapdragon: not-affected (4.4.0-1013.15) bionic_linux-snapdragon: not-affected (4.4.0-1077.82) eoan_linux-snapdragon: DNE focal_linux-snapdragon: DNE groovy_linux-snapdragon: DNE devel_linux-snapdragon: DNE Patches_linux-gcp-4.15: upstream_linux-gcp-4.15: released (3.9~rc8) precise/esm_linux-gcp-4.15: DNE trusty_linux-gcp-4.15: DNE trusty/esm_linux-gcp-4.15: DNE xenial_linux-gcp-4.15: DNE bionic_linux-gcp-4.15: not-affected (4.15.0-1071.81) eoan_linux-gcp-4.15: DNE focal_linux-gcp-4.15: DNE groovy_linux-gcp-4.15: DNE devel_linux-gcp-4.15: DNE Patches_linux-hwe-5.4: upstream_linux-hwe-5.4: released (3.9~rc8) precise/esm_linux-hwe-5.4: DNE trusty_linux-hwe-5.4: DNE trusty/esm_linux-hwe-5.4: DNE xenial_linux-hwe-5.4: DNE bionic_linux-hwe-5.4: not-affected (5.4.0-37.41~18.04.1) focal_linux-hwe-5.4: DNE groovy_linux-hwe-5.4: DNE devel_linux-hwe-5.4: DNE Patches_linux-raspi-5.4: upstream_linux-raspi-5.4: released (3.9~rc8) precise/esm_linux-raspi-5.4: DNE trusty_linux-raspi-5.4: DNE trusty/esm_linux-raspi-5.4: DNE xenial_linux-raspi-5.4: DNE bionic_linux-raspi-5.4: not-affected (5.4.0-1013.13~18.04.1) focal_linux-raspi-5.4: DNE groovy_linux-raspi-5.4: DNE devel_linux-raspi-5.4: DNE Patches_linux-azure-5.4: upstream_linux-azure-5.4: released (3.9~rc8) precise/esm_linux-azure-5.4: DNE trusty_linux-azure-5.4: DNE trusty/esm_linux-azure-5.4: DNE xenial_linux-azure-5.4: DNE bionic_linux-azure-5.4: not-affected (5.4.0-1020.20~18.04.1) focal_linux-azure-5.4: DNE groovy_linux-azure-5.4: DNE devel_linux-azure-5.4: DNE Patches_linux-oracle-5.4: upstream_linux-oracle-5.4: released (3.9~rc8) precise/esm_linux-oracle-5.4: DNE trusty_linux-oracle-5.4: DNE trusty/esm_linux-oracle-5.4: DNE xenial_linux-oracle-5.4: DNE bionic_linux-oracle-5.4: not-affected (5.4.0-1019.19~18.04.1) focal_linux-oracle-5.4: DNE groovy_linux-oracle-5.4: DNE devel_linux-oracle-5.4: DNE Patches_linux-gcp-5.4: upstream_linux-gcp-5.4: released (3.9~rc8) precise/esm_linux-gcp-5.4: DNE trusty_linux-gcp-5.4: DNE trusty/esm_linux-gcp-5.4: DNE xenial_linux-gcp-5.4: DNE bionic_linux-gcp-5.4: not-affected (5.4.0-1019.19~18.04.2) focal_linux-gcp-5.4: DNE groovy_linux-gcp-5.4: DNE devel_linux-gcp-5.4: DNE Patches_linux-aws-5.4: upstream_linux-aws-5.4: released (3.9~rc8) precise/esm_linux-aws-5.4: DNE trusty_linux-aws-5.4: DNE trusty/esm_linux-aws-5.4: DNE xenial_linux-aws-5.4: DNE bionic_linux-aws-5.4: not-affected (5.4.0-1018.18~18.04.1) focal_linux-aws-5.4: DNE groovy_linux-aws-5.4: DNE devel_linux-aws-5.4: DNE Patches_linux-hwe-5.8: upstream_linux-hwe-5.8: released (3.9~rc8) precise/esm_linux-hwe-5.8: DNE trusty_linux-hwe-5.8: DNE trusty/esm_linux-hwe-5.8: DNE xenial_linux-hwe-5.8: DNE bionic_linux-hwe-5.8: DNE focal_linux-hwe-5.8: not-affected (5.8.0-23.24~20.04.1) groovy_linux-hwe-5.8: DNE devel_linux-hwe-5.8: DNE Patches_linux-gke-5.4: upstream_linux-gke-5.4: released (3.9~rc8) precise/esm_linux-gke-5.4: DNE trusty_linux-gke-5.4: DNE trusty/esm_linux-gke-5.4: DNE xenial_linux-gke-5.4: DNE bionic_linux-gke-5.4: not-affected (5.4.0-1025.25~18.04.1) focal_linux-gke-5.4: DNE groovy_linux-gke-5.4: DNE devel_linux-gke-5.4: DNE Patches_linux-gkeop-5.4: upstream_linux-gkeop-5.4: released (3.9~rc8) precise/esm_linux-gkeop-5.4: DNE trusty_linux-gkeop-5.4: DNE trusty/esm_linux-gkeop-5.4: DNE xenial_linux-gkeop-5.4: DNE bionic_linux-gkeop-5.4: not-affected (5.4.0-1001.1) focal_linux-gkeop-5.4: DNE groovy_linux-gkeop-5.4: DNE devel_linux-gkeop-5.4: DNE