Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-14954

19
FAUCET Score

CVE-2017-14954 describes an information disclosure vulnerability in the Linux kernel's waitid implementation (kernel/exit.c) affecting versions through 4.13.4. This flaw allows local users to access rusage data structures in unintended scenarios, enabling them to bypass Kernel Address Space Layout Randomization (KASLR) protections. Rated Medium severity (CVSS 5.5), exploitation requires local access with low attack complexity, leading to high confidentiality impact but no integrity or availability impact. There is currently no evidence of active exploitation, and no public exploit code or significant community discussion has been identified.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.13.4CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.5MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.02%
Probability of exploitation in next 30 days
EPSS Percentile
59.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0102 is in the 96th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2017-14954Low

kernel: Info leak in kernel_waitid()

Sep 29, 2017

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Issue TrackingPatchThird Party Advisory
github.com / torvalds/linux/commit/6c85501f2fabcfc4fc6ed976543d252c4eaf4be9
Issue TrackingPatchThird Party Advisory
grsecurity.net / ~spender/exploits/wait_for_kaslr_to_be_effective.c
Third Party Advisory
twitter.com / _argp/status/914021130712870912
Third Party Advisory
twitter.com / grsecurity/status/914079864478666753
Third Party Advisory