CVE-2017-7294

🗓️ 29 Mar 2017 01:32:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 167 Views🌐 WEB

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 allows local users to trigger an integer overflow and out-of-bounds write, causing denial of service or possibly gaining privileges

Reporter	Title	Published	Views	Family All 171
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by Linux kernel vulnerabilities	25 Jul 201814:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM	6 Jul 201823:49	–	ibm
BDU FSTEC	The vulnerability of the vmw_surface_define_ioctl function in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.	23 Jun 201700:00	–	bdu_fstec
Tenable Nessus	CentOS 7 : kernel (CESA-2018:1062)	27 Apr 201800:00	–	nessus
Tenable Nessus	Debian DLA-922-1 : linux security update	1 May 201700:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1502)	13 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1520)	14 May 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0076)	12 Aug 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0077)	12 Aug 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : the Linux Kernel (openSUSE-2017-532)	2 May 201700:00	–	nessus

NVD

Node

linux linux_kernelRange3.2–3.2.89

linux linux_kernelRange3.3–3.10.107

linux linux_kernelRange3.11–3.12.74

linux linux_kernelRange3.13–3.16.44

linux linux_kernelRange3.17–3.18.50

linux linux_kernelRange3.19–4.1.40

linux linux_kernelRange4.2–4.4.61

linux linux_kernelRange4.5–4.9.22

linux linux_kernelRange4.10–4.10.10

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:0676
lists	www.lists.freedesktop.org/archives/dri-devel/2017-March/137094.html
securityfocus	www.securityfocus.com/bid/97177
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2018:1062

Parameter	Position	Path	Description	CWE
levels_data	path	/dev/dri/renderD*	Integer overflow and out-of-bounds write via crafted ioctl in vmw_surface_define_ioctl for vmwgfx (Linux kernel <= 4.10.6), potentially causing DoS or privilege escalation.	CWE-190, CWE-787

17 Jun 2026 01:24Current

7.4High risk

Vulners AI Score7.4

CVSS 27.2

CVSS 3.17.8

EPSS0.0038