CVE-2017-5577 in Linux Kernel
摘要 (英语)
The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.
预定
2017-01-24
披露
2017-02-06
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 96567 | Linux Kernel VideoCore DRM vc4_gem.c vc4_get_bcl 权限提升 | 388 | 未定义 | 官方修复 | CVE-2017-5577 |