An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.
3.13.0-157.2074.4.0-1028.314.4.0-134.160~14.04.14.4.0-134.1604.4.0-1066.764.15.0-1022.22~16.04.14.15.0-1018.19~16.04.24.15.0-33.36~16.04.14.4.0-1032.384.4.0-1095.103Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H