CVE-2017-14954: Infoleak
Last updated 24 July 2024
Other sources
The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-14954?
CVE-2017-14954 is a vulnerability in the Linux kernel that allows local users to obtain sensitive information and bypass the KASLR protection mechanism.
How does CVE-2017-14954 work?
CVE-2017-14954 works by accessing rusage data structures in unintended cases during the waitid system call.
What is the severity of CVE-2017-14954?
The severity of CVE-2017-14954 is high due to the potential for data leakage and bypassing of security measures.
How can I fix CVE-2017-14954?
To fix CVE-2017-14954, update your Linux kernel to version 4.14~ or higher.
Where can I find more information about CVE-2017-14954?
More information about CVE-2017-14954 can be found on the official Linux kernel repository and the grsecurity website.