kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

An out-of-bounds write vulnerability was found in the Linux kernel's vmwsurfacedefineioctl function, in the 'drivers/gpu/drm/vmwgfx/vmwgfxsurface.c' file. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely...

Linux Kernel 'drivers/gpu/drm/vmwgfx/vmwgfx_surface.c' Local Information Disclosure Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'vmwgbsurfacedefineioctl' function in the drivers/gpu/drm/vmwgfx/vmwgfxsurface.c file of the Linux kernel 4.11.4 and earlier. A local...

PT-2017-17619

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.5 Description The issue is related to the vmw surface define ioctl function in the Linux kernel, which does not properly check for a zero value of certain levels data. This allows local users to cause a deni...