CVE-2017-5577: The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel b...

Security readout for executives and security teams

This is a local denial-of-service flaw in the Linux kernel VideoCore DRM driver. A local user could trigger a kernel crash on affected systems by submitting inconsistent graphics request sizes. The public sources identify fixed upstream Linux code before kernel 4.9.7, but do not provide CVSS scoring or active exploitation evidence. Exposure appears limited to Linux systems running kernels before 4.9.7 with the VideoCore DRM vc4 driver present and reachable by local users. Network-only attackers are not described in the supplied sources. Systems without this driver or without local untrusted users are less likely to be exposed. Treat as a targeted availability risk, not a broad remote emergency. Patch affected Linux systems during normal vulnerability remediation, with higher urgency for multi-user or shared environments where local users can reach the VC4 DRM interface. Mitigation focus: Update to Linux kernel 4.9.7 or a vendor kernel containing the upstream fix.; Check distribution advisories for supported backports of commit 6b8ac63847bc2f958dd93c09edc941a0118992d9.; Prioritize hosts where untrusted local users can access graphics or DRM interfaces..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.