Security Advisory

CVE-2013-7445

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-10-16 01:00:00

Last updated 2024-08-06 18:09:16

Assigner certcc

State PUBLISHED

Description

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

← Browse all CVEs View on cve.org ↗