CVE-2017-7261

The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device.

• CWE-20

• http://marc.info/?t=149037004200005&r=1&w=2Third Party Advisory
• http://www.securityfocus.com/bid/97096
• https://bugzilla.redhat.com/show_bug.cgi?id=1435719Issue Tracking
• https://lists.freedesktop.org/archives/dri-devel/2017-March/136814.htmlThird Party Advisory
• http://marc.info/?t=149037004200005&r=1&w=2Third Party Advisory
• http://www.securityfocus.com/bid/97096
• https://bugzilla.redhat.com/show_bug.cgi?id=1435719Issue Tracking
• https://lists.freedesktop.org/archives/dri-devel/2017-March/136814.htmlThird Party Advisory

Published

Mar 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7253Dahua IP Camera devices 3.200.0001.6 can be exploited via th…
• CVE-2017-7255XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->N…
• CVE-2017-7256XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->N…
• CVE-2017-7257XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->N…
• CVE-2017-7258HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. L…
• CVE-2017-7259Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-7262The AMD Ryzen processor with AGESA microcode through 2017-01…
• CVE-2017-7263The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 …
• CVE-2017-7264Use-after-free vulnerability in the fz_subsample_pixmap func…5.3
• CVE-2017-7266Netflix Security Monkey before 0.8.0 has an Open Redirect. T…
• CVE-2017-7269Buffer overflow in the ScStoragePathFromUrl function in the …9.8
• CVE-2017-7271Reflected Cross-site scripting (XSS) vulnerability in Yii Fr…