CVE-2017-5669: High severity Linux Linux kernel vulnerability

Q: What is the vulnerability CVE-2017-5669?

CVE-2017-5669 is a vulnerability in the Linux kernel that allows local users to map page zero and bypass a protection mechanism for the mmap system call.

Q: What is the severity of CVE-2017-5669?

The severity of CVE-2017-5669 is moderate.

Q: How can I fix CVE-2017-5669?

To fix CVE-2017-5669, update to Linux kernel version 4.11 or later.

Q: Which packages are affected by CVE-2017-5669?

The Linux kernel packages for Ubuntu versions 3.13.0-142.191, 4.4.0-75.96, and 4.11~ and Linux kernel LTS versions 4.11~ are affected by CVE-2017-5669.

Q: Where can I find more information about CVE-2017-5669?

You can find more information about CVE-2017-5669 at the following references: Bugzilla Kernel, SecurityFocus, and SecurityTracker.

Published Feb 24, 2017

Updated

Last updated 4 July 2026

Other sources

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.

— Launchpad

Affected Software

31 affected componentsFixes available

Linux Linux kernel<4.11

Debian Debian Linux=8.0

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

ubuntu/linux<3.13.0-142.191

3.13.0-142.191

ubuntu/linux-lts-xenial<4.4.0-75.96~14.04.1

4.4.0-75.96~14.04.1

ubuntu/linux<4.4.0-75.96

4.4.0-75.96

ubuntu/linux-aws<4.4.0-1016.25

4.4.0-1016.25

ubuntu/linux-gke<4.4.0-1012.12

4.4.0-1012.12

ubuntu/linux-hwe<4.10.0-32.36~16.04.1

4.10.0-32.36~16.04.1

ubuntu/linux-raspi2<4.4.0-1054.61

4.4.0-1054.61

ubuntu/linux-snapdragon<4.4.0-1057.61

4.4.0-1057.61

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-142.191
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-75.96~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-75.96
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1016.25
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 4.4.0-1012.12
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.10.0-32.36~16.04.1
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1054.61
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1057.61
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1

Event History

Feb 24, 2017

CVE Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

RemedyDescriptionSeverityAffected Software

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:59 PM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-3804

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-849-1

Frequently Asked Questions

What is the vulnerability CVE-2017-5669?

CVE-2017-5669 is a vulnerability in the Linux kernel that allows local users to map page zero and bypass a protection mechanism for the mmap system call.

What is the severity of CVE-2017-5669?

The severity of CVE-2017-5669 is moderate.

How can I fix CVE-2017-5669?

To fix CVE-2017-5669, update to Linux kernel version 4.11 or later.

Which packages are affected by CVE-2017-5669?

The Linux kernel packages for Ubuntu versions 3.13.0-142.191, 4.4.0-75.96, and 4.11~ and Linux kernel LTS versions 4.11~ are affected by CVE-2017-5669.

Where can I find more information about CVE-2017-5669?

You can find more information about CVE-2017-5669 at the following references: Bugzilla Kernel, SecurityFocus, and SecurityTracker.

CVE-2017-5669: High severity Linux Linux kernel vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the vulnerability CVE-2017-5669?

What is the severity of CVE-2017-5669?

How can I fix CVE-2017-5669?

Which packages are affected by CVE-2017-5669?

Where can I find more information about CVE-2017-5669?

Company

Resources

Contact