Vulnerability Details : CVE-2017-5576
Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2017-5576
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-5576
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 21 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-5576
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2017-5576
-
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-5576
-
https://lkml.org/lkml/2017/1/17/761
LKML: Eric Anholt: [PATCH 1/2] drm/vc4: Fix an integer overflow in temporary allocation layout.Mailing List;Patch;Third Party Advisory
-
https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf
drm/vc4: Fix an integer overflow in temporary allocation layout. · torvalds/linux@0f2ff82 · GitHubIssue Tracking;Patch;Third Party Advisory
-
http://www.securityfocus.com/bid/95767
Linux Kernel CVE-2017-5576 Integer Overflow VulnerabilityThird Party Advisory;VDB Entry
-
http://www.openwall.com/lists/oss-security/2017/01/21/7
oss-security - CVE request: Linux kernel: vc4: int overflow leading to heap-based buffer overflowMailing List;Patch;Third Party Advisory
-
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7
Release Notes;Vendor Advisory
-
https://bugzilla.redhat.com/show_bug.cgi?id=1416436
1416436 – (CVE-2017-5576) CVE-2017-5576 kernel: vc4: Integer overflow in temporary allocation layoutIssue Tracking;Patch
-
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf
kernel/git/torvalds/linux.git - Linux kernel source treeIssue Tracking;Patch;Third Party Advisory
Jump to