CVE-2017-14156

CVE-2017-14156 describes an information disclosure vulnerability in the Linux kernel's atyfb_ioctl function, affecting versions through 4.12.10. This flaw allows local users to read uninitialized kernel stack memory due to a missing data structure initialization, potentially exposing sensitive information. Rated 5.5 MEDIUM, it requires local access with low attack complexity and no user interaction, impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.