CVE-2017-5669: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: before 4.11 (fixed in 4.11)

Published 2017-02-24. Last modified 2026-06-17.