CVE-2017-14140

The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker…

published September 5, 2017

CVSS
—
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00469 · 39.3th percentile
Published
2017-09-05T06:00Z
EPSS history
Timeline
  • 05 SEP 06:00Z
    The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker…
    cvelistv5