CVE-2017-5576

Published: Feb 6, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.

Affected (1)

Products: Linux: Linux Kernel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.5 to 4.9.7

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (14)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7

Source: cve@mitre.org

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2017/01/21/7

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/95767

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1416436

Source: cve@mitre.org

Issue TrackingPatch

https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://lkml.org/lkml/2017/1/17/761

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2017/01/21/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/95767

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1416436

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://lkml.org/lkml/2017/1/17/761

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

Timeline

No history available yet.