CVE-2017-5123
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
Does this matter?
2 public exploits are published in Exploit-DB and the impact is high, while EPSS rates exploitation at 3.7%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use.
Description
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 3.74% probability · 90th percentile
- Public exploits
- 2 in Exploit-DB · first 22 October 2017
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- linux/linux kernel · netapp/cloud backup · netapp/h300s firmware · netapp/h500s firmware · netapp/h700s firmware · netapp/h300e firmware · netapp/h500e firmware · netapp/h700e firmware · netapp/h410s firmware
- Source
- chrome-cve-admin@google.com
EPSS 3.7% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (2)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
| EDB-ID | Title | Type | Published | Verified |
|---|---|---|---|---|
| EDB-43127source ↗ | Linux Kernel 4.13 (Ubuntu 17.10) - 'waitid()' SMEP/SMAP/Chrome Sandbox Privilege Escalationlinux · Chris Salls | local | 6 November 2017 | no |
| EDB-43029source ↗ | Linux Kernel 4.14.0-rc4+ - 'waitid()' Local Privilege Escalationlinux · @XeR_0x2A & @chaign_c | local | 22 October 2017 | no |
References
- https://crbug.com/772848Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20211223-0003/Third Party Advisory
- https://crbug.com/772848Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96ca579a1ecc943b75beba58bebb0356f6cc4b51Patch, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20211223-0003/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.