CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Numeric Errors
Summary: multiple integer overflows in alchemy lcd frame-buffer drivers in the linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the (1) au1100fb_fb_mmap function in drivers/video/au1100fb.c and the (2) au1200fb_fb_mmap function in drivers/video/au1200fb.c.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-11-12
Last Modified Date: 2014-03-06