Memory corruption in Linux kernel - CVE-2017-7294

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6658

Memory corruption in Linux kernel - CVE-2017-7294

Published: May 23, 2017 / Updated: April 27, 2018


Vulnerability identifier: #VU6658
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7294
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to cause DoS condition or gain elevated privileges on the target system.

The weakness exists in the vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c due to missing validation of addition of certain levels data. A local attacker can trigger integer overflow and out-of-bounds write, cause the service to crash or possibly gain root privileges via a crafted ioctl call for a /dev/dri/renderD* device.

Affected software

Linux kernel
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time for NFV
SUSE Linux
Ubuntu

kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Virtualization Host

How to mitigate CVE-2017-7294

Update to version 4.10.6.

kernel (Red Hat package) - update to 3.10.0-862.el7
kernel-rt (Red Hat package) - update to 3.10.0-862.rt56.804.el7

External References

Related Security Bulletins