CVE-2013-7445

Published: Oct 16, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Affected (23)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.0.0
Linux Linux Kernel	Version 4.0.1
Linux Linux Kernel	Version 4.0.2
Linux Linux Kernel	Version 4.0.3
Linux Linux Kernel	Version 4.0.4
Linux Linux Kernel	Version 4.0.5
Linux Linux Kernel	Version 4.0.6
Linux Linux Kernel	Version 4.0.7
Linux Linux Kernel	Version 4.0.8
Linux Linux Kernel	Version 4.0.9
Linux Linux Kernel	Version 4.1.10
Linux Linux Kernel	Version 4.1.1
Linux Linux Kernel	Version 4.1.2
Linux Linux Kernel	Version 4.1.3
Linux Linux Kernel	Version 4.1.4
Linux Linux Kernel	Version 4.1.5
Linux Linux Kernel	Version 4.1.6
Linux Linux Kernel	Version 4.1.7
Linux Linux Kernel	Version 4.1.8
Linux Linux Kernel	Version 4.1.9
Linux Linux Kernel	Version 4.2.1
Linux Linux Kernel	Version 4.2.2
Linux Linux Kernel	Version 4.2.3

Related CWEs

CWE-399

References (2)

https://bugzilla.kernel.org/show_bug.cgi?id=60533

Source: cret@cert.org

https://bugzilla.kernel.org/show_bug.cgi?id=60533

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.