CVE

Id
102397  
CVE No.
CVE-2017-5577  
Status
Candidate  
Description
The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.  
Phase
Assigned (20170124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805127 102397 CVE-2017-5577 MLIST:[linux-kernel] 20170118 [PATCH 2/2] drm/vc4: Return -EINVAL on the overflow checks failing.  View
805128 102397 CVE-2017-5577 URL:https://lkml.org/lkml/2017/1/17/759  View
805129 102397 CVE-2017-5577 MLIST:[oss-security] 20170122 CVE request: Linux kernel: vc4: int overflow leading to heap-based buffer overflow  View
805130 102397 CVE-2017-5577 URL:http://www.openwall.com/lists/oss-security/2017/01/21/7  View
805131 102397 CVE-2017-5577 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6b8ac63847bc2f958dd93c09edc941a0118992d9  View
805132 102397 CVE-2017-5577 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7  View
805133 102397 CVE-2017-5577 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1416437  View
805134 102397 CVE-2017-5577 CONFIRM:https://github.com/torvalds/linux/commit/6b8ac63847bc2f958dd93c09edc941a0118992d9  View
805135 102397 CVE-2017-5577 BID:95765  View

Related JVN