ZeroDay Findings
Sign inSign up

Findings

CVE-2013-2596

Linux Kernel Integer Overflow Vulnerability

Published Apr 12, 2013 · updated Jun 16, 2026 · linux linux kernel

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 12, 2013 · Catalog

    Detected

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

  2. Sep 15, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Oct 6, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

Required action

Apply updates per vendor instructions.

CISA due date Oct 6, 2022

Affected

  • cpe linux/linux kernelversion unspecified
  • cpe motorola/android4.1.2
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2013-2596

    Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.

    cisa.gov
  • CVE.orgCVE-2013-2596

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2013-2596

    30-day exploitation probability 3.2%

    first.org
  • NIST NVDCVE-2013-2596

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequentl

    nvd.nist.gov

References