CVE-2017-14140: The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective ui...

Security readout for executives and security teams

CVE-2017-14140 is a Linux kernel weakness that can let a local user learn memory layout details from privileged setuid programs. That undermines ASLR, a defense that makes exploitation harder. It is not described as remote code execution by itself, but it can help another local exploit succeed. Exposure is most likely on Linux systems running kernels before 4.12.9 or vendor kernel branches that had not backported the fix. The source bundle includes Ubuntu, Debian, Red Hat, and Android Pixel advisories, but exact affected package versions must be confirmed from each vendor notice. Treat this as a moderate-priority kernel update issue. It is not documented as actively exploited or remotely reachable in the provided sources, but it weakens a core exploit mitigation and matters on systems with local user access or shared workloads. Mitigation focus: Update to Linux kernel 4.12.9 or a vendor-fixed kernel package.; Use Ubuntu, Debian, Red Hat, or Android Pixel advisories for package-specific remediation.; Prioritize shared systems where untrusted users have local execution access..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.