The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Mar 29, 2017 |
| Debian | debian-upgrade-linux | May 1, 2017 | Mar 28, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Apr 19, 2018 | Mar 28, 2017 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Apr 11, 2018 | Mar 28, 2017 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Apr 19, 2017 | Mar 28, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-123-genericubuntu-upgrade-linux-image-3-13-0-123-generic-lpaeubuntu-upgrade-linux-image-3-13-0-123-lowlatencyubuntu-upgrade-linux-image-3-13-0-123-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-123-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-123-powerpc-smpubuntu-upgrade-linux-image-3-13-0-123-powerpc64-embubuntu-upgrade-linux-image-3-13-0-123-powerpc64-smpubuntu-upgrade-linux-image-4-10-0-1005-raspi2ubuntu-upgrade-linux-image-4-10-0-21-genericubuntu-upgrade-linux-image-4-10-0-21-generic-lpaeubuntu-upgrade-linux-image-4-10-0-21-lowlatencyubuntu-upgrade-linux-image-4-4-0-1013-gkeubuntu-upgrade-linux-image-4-4-0-1017-awsubuntu-upgrade-linux-image-4-4-0-1055-raspi2ubuntu-upgrade-linux-image-4-4-0-1058-snapdragonubuntu-upgrade-linux-image-4-4-0-78-genericubuntu-upgrade-linux-image-4-4-0-78-generic-lpaeubuntu-upgrade-linux-image-4-4-0-78-lowlatencyubuntu-upgrade-linux-image-4-4-0-78-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-78-powerpc-smpubuntu-upgrade-linux-image-4-4-0-78-powerpc64-embubuntu-upgrade-linux-image-4-4-0-78-powerpc64-smpubuntu-upgrade-linux-image-4-8-0-1042-raspi2ubuntu-upgrade-linux-image-4-8-0-58-genericubuntu-upgrade-linux-image-4-8-0-58-generic-lpaeubuntu-upgrade-linux-image-4-8-0-58-lowlatencyubuntu-upgrade-linux-image-4-8-0-58-powerpc-e500mcubuntu-upgrade-linux-image-4-8-0-58-powerpc-smpubuntu-upgrade-linux-image-4-8-0-58-powerpc64-embubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtual | May 18, 2017 | Mar 28, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub