Actively exploited in the wild
Linux Kernel Integer Overflow Vulnerability
Linux - Kernel · Listed in the CISA KEV since 2022-09-15. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2013-2596
HighCVSS 7.8KEVSummary
Przepełnienie całkowitej liczby w funkcji fb_mmap w jądrze Linux przed wersją 3.8.9, używanej w niektórych wersjach Motorola Android 4.1.2, umożliwia lokalnym użytkownikom stworzenie mapowania pamięci do odczytu i zapisu dla całej pamięci jądra. Może to prowadzić do uzyskania uprawnień przez odpowiednio skonstruowane wywołania systemowe mmap2 na /dev/graphics/fb0.
Risk Assessment
Podatność ta stwarza poważne ryzyko dla bezpieczeństwa systemu, ponieważ lokalni użytkownicy mogą uzyskać nieautoryzowany dostęp do pamięci jądra, co może prowadzić do eskalacji uprawnień i potencjalnego przejęcia kontroli nad systemem.
Recommendation
Zaleca się aktualizację jądra Linux do wersji 3.8.9 lub nowszej, aby usunąć tę podatność oraz monitorowanie systemu pod kątem nieautoryzowanych działań użytkowników.
Related vulnerabilities
- CVE-2026-87701Critical
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85889Critical
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85885Critical
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-77903Critical
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70009Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69865Critical
Authorization bypass through a user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69399Critical
Elevation of Privilege vulnerability in Azure Arc. Technical details were not provided in the description.
- CVE-2026-76949Critical
A vulnerability in the ash_authentication library (Elixir) allows an attacker who can plant a remember-me cookie in a victim's browser to replace the victim's authenticated session with one for the attacker's own account. The issue stems from a mismatch between the session keys used by the guard and the reader, causing remember-me sign-in to run on every request.
Original NVD description (English source)
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.