CVE-2017-5576

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbfIssue Tracking, Patch, Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/21/7Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95767Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1416436Issue Tracking, Patch
https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbfIssue Tracking, Patch, Third Party Advisory
https://lkml.org/lkml/2017/1/17/761Mailing List, Patch, Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbfIssue Tracking, Patch, Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/21/7Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/95767Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1416436Issue Tracking, Patch
https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbfIssue Tracking, Patch, Third Party Advisory
https://lkml.org/lkml/2017/1/17/761Mailing List, Patch, Third Party Advisory

Timeline

Published: Feb 6, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-55775.5The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno CVE-2017-55786.5Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS CVE-2017-55796.5Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to caus CVE-2017-55807.1The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a de CVE-2017-55819.8Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execute arbitrary code via CVE-2017-55836.5The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authentic CVE-2017-55845.4Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7 CVE-2017-55858.8OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row CVE-2017-55869.8OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java CVE-2017-55895.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55905.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ CVE-2017-55915.9An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, includ