CVE-2017-5576: Integer overflow in the vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver i...

Security readout for executives and security teams

CVE-2017-5576 is a Linux kernel flaw in the VideoCore DRM graphics driver. A local user could trigger a crash, and the sources note possible unspecified additional impact. This is not a remote internet-facing issue based on the provided evidence. Exposure is likely limited to Linux systems running the VC4 VideoCore DRM driver on kernels before 4.9.7, or older vendor kernels without the referenced fix. The attacker needs local access capable of reaching the affected ioctl path. Treat as a focused local kernel-risk item, not a broad perimeter emergency. Patch affected VC4-enabled Linux systems during normal vulnerability remediation, faster where untrusted users have local access. Mitigation focus: Update to Linux kernel 4.9.7 or a vendor kernel containing the fix.; Confirm distribution backports using vendor advisories or package changelogs.; Limit untrusted local user access on systems exposing the VC4 DRM device..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.