Lucene search

K
redhatcveRedhat.comRH:CVE-2017-14140
HistorySep 05, 2017 - 7:48 a.m.

CVE-2017-14140

2017-09-0507:48:37
redhat.com
access.redhat.com
15

0.0004 Low

EPSS

Percentile

5.1%

The move_pages system call in mm/migrate.c in the Linux kernel doesn’t check the effective uid of the target process. This enables a local attacker to learn the memory layout of a setuid executable allowing mitigation of ASLR.