CVE-2017-5669: High severity Linux Linux kernel vulnerability
Last updated 4 July 2026
Other sources
The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1 - Upgrade
Upgrade
Linux kernel (ipc/shm.c)to a version that resolves this vulnerability.Fixed in 4.9.12 - Compensating control
Apply a compensating control to prevent unprivileged local users from reaching the affected shmget/shmat path in a privileged context until the kernel fix (do_shmat in ipc/shm.c) is applied.
Event History
Frequently Asked Questions
What is the vulnerability CVE-2017-5669?
CVE-2017-5669 is a vulnerability in the Linux kernel that allows local users to map page zero and bypass a protection mechanism for the mmap system call.
What is the severity of CVE-2017-5669?
The severity of CVE-2017-5669 is moderate.
How can I fix CVE-2017-5669?
To fix CVE-2017-5669, update to Linux kernel version 4.11 or later.
Which packages are affected by CVE-2017-5669?
The Linux kernel packages for Ubuntu versions 3.13.0-142.191, 4.4.0-75.96, and 4.11~ and Linux kernel LTS versions 4.11~ are affected by CVE-2017-5669.
Where can I find more information about CVE-2017-5669?
You can find more information about CVE-2017-5669 at the following references: Bugzilla Kernel, SecurityFocus, and SecurityTracker.