CVE-2017-10810

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-772

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722aMailing List, Patch, Third Party Advisory
http://www.debian.org/security/2017/dsa-3927Third Party Advisory
http://www.securityfocus.com/bid/99433Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722aPatch, Third Party Advisory
https://lkml.org/lkml/2017/4/6/668Mailing List, Patch, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722aMailing List, Patch, Third Party Advisory
http://www.debian.org/security/2017/dsa-3927Third Party Advisory
http://www.securityfocus.com/bid/99433Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/385aee965b4e4c36551c362a334378d2985b722aPatch, Third Party Advisory
https://lkml.org/lkml/2017/4/6/668Mailing List, Patch, Third Party Advisory

Timeline

Published: Jul 4, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-108116.8Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-108127.8Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan CVE-2017-108136.8CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-108146.8Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.CVE-2017-108158.1MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control"CVE-2017-108169.8SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via R CVE-2017-108179.8MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server.CVE-2017-108189.8MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection se CVE-2017-108195.9MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communicatio CVE-2017-10827.5In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern. Feeding a patho CVE-2017-108207.8Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan CVE-2017-108217.8Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September