What’s Vulnerable › Vulnerabilities
CVE-2013-7445
- Severity: high (CVSS 7.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2015-10-16 · updated 2026-06-17
- Weakness: CWE-399
Description
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
Affected products
- Linux kernel: through 4.0.0; 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6 (+16)
References
Get alerted when CVE-2013-7445 or the next vulnerability affects your stack