CVE-2017-14156: The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does n...

Security readout for executives and security teams

CVE-2017-14156 is a Linux kernel information leak. A local user could read uninitialized kernel stack memory through the atyfb framebuffer ioctl path. This is not described as remotely exploitable, but it could expose sensitive kernel data on affected systems. Exposure is most likely on older Linux systems running kernels through 4.12.10 with the atyfb framebuffer driver present and reachable by local users. The provided affected-product metadata is incomplete. Treat this as a maintenance-priority kernel update, not an emergency remote-compromise event. It matters most on shared-user systems, workstations, kiosks, or environments where local access is broad. Mitigation focus: Apply relevant vendor kernel updates from Debian, Ubuntu, or your Linux distributor.; Prioritize systems that permit local shell or desktop access.; Review vendor guidance if running custom or unsupported kernels..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.