SB2015101607 - Resource management error in Linux kernel
Published: October 16, 2015 Updated: August 9, 2020
Security Bulletin ID
SB2015101607
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource management error (CVE-ID: CVE-2013-7445)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
Remediation
Install update from vendor's website.