What is CVE-2011-1013?

CVE-2011-1013 is a vulnerability in Linux Kernel, classified under Out-of-bounds Write. Published 2011-05-09.

Is CVE-2011-1013 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Linux Kernel

CVE-2011-1013

Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel
Openbsd
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

Public proof-of-concept exploits

References

secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Issue Tracking)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2011-1013?: CVE-2011-1013 is a vulnerability in Linux Kernel, classified under Out-of-bounds Write. Published 2011-05-09.
Is CVE-2011-1013 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.