CVE-2017-5576

CVE-2017-5576 describes an integer overflow vulnerability in the VideoCore DRM driver (vc4_get_bcl function) within the Linux kernel before version 4.9.7. A local attacker can exploit this flaw by providing a crafted size value in a VC4_SUBMIT_CL ioctl call. This vulnerability carries a CVSSv3 score of 7.8 (High), indicating that it is easily exploitable locally with low complexity, potentially leading to a denial of service, and possibly other significant impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.