CVE-2017-14954

The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases, which allows local users to obtain sensitive information, and bypass the KASLR protection mechanism, via a crafted system call.

• CWE-200

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
• https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
• https://twitter.com/_argp/status/914021130712870912Third Party Advisory
• https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9Issue Tracking, Patch, Third Party Advisory
• https://grsecurity.net/~spender/exploits/wait_for_kaslr_to_be_effective.cThird Party Advisory
• https://twitter.com/_argp/status/914021130712870912Third Party Advisory
• https://twitter.com/grsecurity/status/914079864478666753Third Party Advisory

Published

Oct 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14947Artifex GSView 6.0 Beta on Windows allows attackers to execu…
• CVE-2017-14948Certain D-Link products are affected by: Buffer Overflow. Th…9.8
• CVE-2017-14949Restlet Framework before 2.3.12 allows remote attackers to a…
• CVE-2017-1495IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could …
• CVE-2017-14952Double free in i18n/zonemeta.cpp in International Components…
• CVE-2017-14953HikVision Wi-Fi IP cameras, when used in a wired configurati…
• CVE-2017-14955Check_MK before 1.2.8p26 mishandles certain errors within th…5.9
• CVE-2017-14956AlienVault USM v5.4.2 and earlier offers authenticated users…
• CVE-2017-14957Stored XSS vulnerability via a comment in inc/conv.php in Bl…
• CVE-2017-14958lib.php in PivotX 2.3.11 does not properly block uploads of …
• CVE-2017-1496IBM Sterling B2B Integrator Standard Edition 5.2.x is vulner…
• CVE-2017-14960xDashboard in OpenText Document Sciences xPression (formerly…