CVE-2013-7445: Linux Kernel

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

Affected products

• Linux Linux Kernel: up to and including 4.0.0; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2015-10-16. Last modified 2026-06-17.