The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in unintended cases which allows local users to obtain sensitive information and bypass the KASLR protection mechanism via a crafted system call.