CVE

Id
102396  
CVE No.
CVE-2017-5576  
Status
Candidate  
Description
Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4_SUBMIT_CL ioctl call.  
Phase
Assigned (20170124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805118 102396 CVE-2017-5576 MLIST:[linux-kernel] 20170118 [PATCH 1/2] drm/vc4: Fix an integer overflow in temporary allocation layout.  View
805119 102396 CVE-2017-5576 URL:https://lkml.org/lkml/2017/1/17/761  View
805120 102396 CVE-2017-5576 MLIST:[oss-security] 20170122 CVE request: Linux kernel: vc4: int overflow leading to heap-based buffer overflow  View
805121 102396 CVE-2017-5576 URL:http://www.openwall.com/lists/oss-security/2017/01/21/7  View
805122 102396 CVE-2017-5576 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2ff82e11c86c05d051cae32b58226392d33bbf  View
805123 102396 CVE-2017-5576 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7  View
805124 102396 CVE-2017-5576 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1416436  View
805125 102396 CVE-2017-5576 CONFIRM:https://github.com/torvalds/linux/commit/0f2ff82e11c86c05d051cae32b58226392d33bbf  View
805126 102396 CVE-2017-5576 BID:95767  View

Related JVN