Integer overflow in the i915_gem_do_execbuffer function in
drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Direct Rendering Manager
(DRM) subsystem in the Linux kernel before 3.3.5 on 32-bit platforms allows
local users to cause a denial of service (out-of-bounds write) or possibly
have unspecified other impact via a crafted ioctl call.

Xi Wang discovered a flaw in the Linux kernel's i915 graphics driver
handling of buffer_count on 32 bit systems. An unprivileged local attacker
could leverage this flaw to cause a denial of service or potentially gain
root privileges.