CVE-2017-5669: The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calcula...

Security readout for executives and security teams

CVE-2017-5669 is a Linux kernel flaw where a local user could cause page zero to be mapped through shared memory handling, bypassing a protection normally enforced for mmap. This matters most on systems where untrusted local users can run code or influence privileged processes. Exposure is most likely on Linux systems running kernels through 4.9.12 or unfixed downstream kernels. Ubuntu and Debian published advisories, and upstream Linux commits are referenced. Exact package exposure requires checking the relevant vendor advisory and installed kernel build. Treat this as a patching priority for Linux hosts with local user access, shared administrative environments, or legacy kernels. It is not supported as internet-exploitable or actively exploited in the supplied evidence, so prioritize based on local-user exposure. Mitigation focus: Apply vendor-supported Linux kernel updates referencing CVE-2017-5669.; Reboot systems so the fixed kernel is actually running.; Check Ubuntu or Debian advisories for distribution-specific fixed packages..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.