CVE-2017-14140: Infoleak

Q: What is CVE-2017-14140?

CVE-2017-14140 is a vulnerability in the Linux kernel that allows a local attacker to learn the memory layout of a setuid executable despite ASLR.

Q: How does CVE-2017-14140 impact the Linux kernel?

CVE-2017-14140 impacts the Linux kernel before version 4.12.9 and allows a local attacker to learn the memory layout of a setuid executable despite ASLR.

Q: What is the severity of CVE-2017-14140?

The severity of CVE-2017-14140 is low.

Q: How can I fix CVE-2017-14140?

To fix CVE-2017-14140, update the Linux kernel to version 4.12.9 or later.

Q: Where can I find more information about CVE-2017-14140?

You can find more information about CVE-2017-14140 on the following sources: [1] [2] [3]

Published Sep 5, 2017

Updated

Last updated 29 November 2024

Other sources

The movepages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.

Upstream patch:

https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9

— Red Hat

Affected Software

27 affected componentsFixes available

redhat/kernel<4.13

4.13

Linux Linux kernel<=4.12.8

ubuntu/linux<3.13.0-142.191

3.13.0-142.191

ubuntu/linux-lts-xenial<4.4.0-97.120~14.04.1

4.4.0-97.120~14.04.1

ubuntu/linux<4.4.0-97.120

4.4.0-97.120

ubuntu/linux-aws<4.4.0-1038.47

4.4.0-1038.47

ubuntu/linux-azure<4.13.0-1005.7

4.13.0-1005.7

ubuntu/linux-gcp<4.13.0-1002.5

4.13.0-1002.5

ubuntu/linux-gke<4.4.0-1032.32

4.4.0-1032.32

ubuntu/linux-hwe<4.13.0-32.35~16.04.1

4.13.0-32.35~16.04.1

ubuntu/linux-kvm<4.4.0-1008.13

4.4.0-1008.13

ubuntu/linux-raspi2<4.4.0-1075.83

4.4.0-1075.83

ubuntu/linux-snapdragon<4.4.0-1077.82

4.4.0-1077.82

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 4.13
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-142.191
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-97.120~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-97.120
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1038.47
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.13.0-1005.7
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.13.0-1002.5
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 4.4.0-1032.32
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.13.0-32.35~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1008.13
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1075.83
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1077.82
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Fixed in 4.12.9

Event History

Sep 5, 2017

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Parent advisories

This vulnerability appears in the following advisories.

DSA-3981

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-1099-1

Frequently Asked Questions

What is CVE-2017-14140?