CVE-2017-5669

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.12

Description The issue is related to the do shmat function in ipc/shm.c in the Linux kernel, which does not properly restrict the address calculated by a certain rounding operation. This allows local users to map page zero and bypass a protection mechanism that exists for the mmap system call. The exploitation can be done by making crafted shmget and shmat system calls in a privileged context. The vulnerability is also related to insufficient input validation.

Recommendations For Linux kernel versions prior to 4.9.12, update to a version 4.9.12 or later to resolve the issue. As a temporary workaround, consider restricting the use of the do shmat function in ipc/shm.c until a patch is available. Avoid making crafted shmget and shmat system calls in a privileged context to minimize the risk of exploitation.