CVE-2017-14954

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
https://twitter.com/_argp/status/914021130712870912Third Party Advisory
https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
https://twitter.com/_argp/status/914021130712870912Third Party Advisory
https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory

Timeline

Published: Oct 2, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-149555.9Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote att CVE-2017-149565.7AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_CVE-2017-149576.1Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If CVE-2017-149587.2lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PHP code execution via CVE-2017-14965.4IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary CVE-2017-149607.5xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.CVE-2017-149617.8In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IO CVE-2017-149627.8In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input va CVE-2017-149637.8In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values CVE-2017-149647.8In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values CVE-2017-149657.8In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values CVE-2017-149667.8In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values