CVE-2017-7346 — kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()

Back Back to CVE browser

MEDIUM

kernel: drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()

Published Mar 30, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 0.38%

Description

The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/renderD* device.

Affected products

Red Hat Enterprise Linux 5

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Will not fix
Red Hat Enterprise Linux 7

kernel

Will not fix
Red Hat Enterprise Linux 7

kernel-rt

Will not fix
Red Hat Enterprise MRG 2

realtime-kernel

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Will not fix	n/a
Red Hat Enterprise Linux 7	kernel	Will not fix	n/a
Red Hat Enterprise Linux 7	kernel-rt	Will not fix	n/a
Red Hat Enterprise MRG 2	realtime-kernel	Will not fix	n/a

Remediation

Red Hat statement

This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code where the flaw was found is not present in this product. This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Metrics

0.38% 0.00378

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00378

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.38% (0.00378)	29.35th	v5 (v2026.06.15)
Sep 20, 2026	0.38% (0.00378)	31.67th	v5 (v2026.06.15)
Jul 20, 2024	0.04% (0.00042)	5.06th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	1.03% (0.01034)	41.69th	v2 (v2022.01.01)
Feb 4, 2022	1.03% (0.01034)	20.32th	v2 (v2022.01.01)
Feb 3, 2022	0.97% (0.00967)	26.07th	v5 (v2026.06.15)
Apr 14, 2021	0.97% (0.00967)	0.00th	v1

Weaknesses (1)

CWE-20

Improper Input Validation

References (9)

http://marc.info/?l=linux-kernel&m=149086968410117&w=2
x_refsource_CONFIRMPatchThird Party Advisory
http://www.debian.org/security/2017/dsa-3927
vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2017/dsa-3945
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/97257
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-7346
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1437431
x_refsource_CONFIRMIssue TrackingPatch
https://lists.freedesktop.org/archives/dri-devel/2017-March/137429.html
x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7346
https://www.cve.org/CVERecord?id=CVE-2017-7346

Link	Providers	Tags
http://marc.info/?l=linux-kernel&m=149086968410117&w=2		x_refsource_CONFIRMPatchThird Party Advisory
http://www.debian.org/security/2017/dsa-3927		vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2017/dsa-3945		vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/97257		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-7346		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1437431		x_refsource_CONFIRMIssue TrackingPatch
https://lists.freedesktop.org/archives/dri-devel/2017-March/137429.html		x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7346
https://www.cve.org/CVERecord?id=CVE-2017-7346