CVE detail
CVE-2013-2596 — Linux Kernel Integer Overflow Vulnerability
Published 2022-09-15 · Modified 2022-09-15 · Source kev
HIGH
severity
CVSS-derived band
0.0337
EPSS probability
exploitation probability, 30d
88.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2022-10-06
⚠ Actively exploited in the wild — CISA KEV listed 2022-09-15, federal remediation due 2022-10-06.
Description
Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References