Description
Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.2.41-2 | — |
| Debian 13 | linux | 3.2.41-2 | — |
| Debian 12 | linux | 3.2.41-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-358.6.1.el6 | RHSA-2013:0744 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +11 | 3.6.11.2-rt33.39.el6rt | RHSA-2013:0829 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 4.8.13-1.1 | openSUSE-SU-2024:10128-1 |
Advisories 3
- RHSA-2013:0829 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:0744 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- openSUSE-SU-2024:10128-1 kernel-debug-4.8.13-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- openSUSE-SU-2013:0847 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=920471
- USN-1812-1 vendor-advisory
- [oss-security] 20130311 CVE-2013-0913 Linux kernel i915 integer overflow mailing-list
- USN-1809-1 vendor-advisory
- [oss-security] 20130314 Re: CVE-2013-0913 Linux kernel i915 integer overflow mailing-list
- USN-1814-1 vendor-advisory
- [oss-security] 20130313 Re: CVE-2013-0913 Linux kernel i915 integer overflow mailing-list
- https://gerrit.chromium.org/gerrit/45118
- RHSA-2013:0744 vendor-advisory
- http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html
- USN-1813-1 vendor-advisory
- [linux-kernel] 20130311 [PATCH] drm/i915: bounds check execbuffer relocations mailing-list
- openSUSE-SU-2013:0925 vendor-advisory
- http://git.chromium.org/gitweb/?p=chromiumos/third_party/kernel.git%3Ba=commit%3Bh=c79efdf2b7f68f985922a8272d64269ecd490477
- USN-1811-1 vendor-advisory
- https://code.google.com/p/chromium-os/issues/detail?id=39733