CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Improper Input Validation
Summary: the do_shmat function in ipc/shm.c in the linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-02-24
Last Modified Date: 2019-10-03