CVE-2013-2596
Linux Kernel Integer Overflow Vulnerability
CVSS
—
No CVSS
EPSS
3.3%
p88
KEV
YES
Sep 15, 2022
Exploit Today
76
0-100
Published: — · Last modified: —
3.3%EPSS · 30 days3.4%
2026-08-022026-08-31
Product
Linux / Kernel
Vulnerability
Linux Kernel Integer Overflow Vulnerability
Added to KEV
Sep 15, 2022
Remediate by
Oct 6, 2022
Known ransomware use
No
Summary description
Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.
Required action
Apply updates per vendor instructions.
Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc9bbca8f650e5f738af8806317c0a041a48ae4a; https://nvd.nist.gov/vuln/detail/CVE-2013-2596
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-533627.8 HIG41.5%
KEV—62Linux Kernel Unspecified Vulnerability3dCVE-2026-314317.8 HIG100.0%
KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability34dCVE-2025-383527.8 HIG68.0%
KEV—70Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability32dCVE-2024-10867.8 HIG98.0%
KEV—79Linux Kernel Use-After-Free Vulnerability24dCVE-2022-25865.3 MED95.4%
KEV—79Linux Kernel Use-After-Free Vulnerability11dCVE-2022-09957.8 HIG95.1%
KEV—79Linux Kernel Out-of-Bounds Write Vulnerability5d