CVE-2017-5546

The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29fIssue Tracking, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2017/01/21/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95711Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1415733Issue Tracking, Patch
• https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29fIssue Tracking, Patch, Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29fIssue Tracking, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5Release Notes, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2017/01/21/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/95711Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1415733Issue Tracking, Patch
• https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29fIssue Tracking, Patch, Third Party Advisory

Published

Feb 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5539The patch for directory traversal (CVE-2017-5480) in b2evolu…
• CVE-2017-5541Directory traversal vulnerability in template/usererror.miss…
• CVE-2017-5542Cross-site scripting (XSS) vulnerability in template/usererr…
• CVE-2017-5543includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allo…
• CVE-2017-5544An issue was discovered on FiberHome Fengine S5800 switches …5.9
• CVE-2017-5545The main function in plistutil.c in libimobiledevice libplis…
• CVE-2017-5547drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4…7.8
• CVE-2017-5548drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x bef…
• CVE-2017-5549The klsi_105_get_line_state function in drivers/usb/serial/k…
• CVE-2017-5550Off-by-one error in the pipe_advance function in lib/iov_ite…
• CVE-2017-5551The simple_set_acl function in fs/posix_acl.c in the Linux k…
• CVE-2017-5552Memory leak in the virgl_resource_attach_backing function in…6.5