CVE-2017-5577

CVE-2017-5577 describes a denial-of-service vulnerability in the VideoCore DRM driver (vc4_gem.c) of the Linux kernel before version 4.9.7. Specifically, the vc4_get_bcl function fails to set an errno value during certain overflow detections, allowing local users to trigger an incorrect pointer dereference and kernel OOPS via malformed VC4_SUBMIT_CL ioctl calls. The vulnerability has a CVSS v3.0 score of 5.5 (MEDIUM), indicating a local attack vector with low attack complexity, requiring low privileges, and resulting in high availability impact (denial of service). There is no confidentiality or integrity impact. There is no evidence of active exploitation, nor are there any known public exploits available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.