cve/2017/CVE-2017-7294.md

CVE-2017-7294

Description

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.

POC

Reference

No PoCs from references.

Github

• https://github.com/thdusdl1219/CVE-Study