CVE-2017-18202 PUBLISHED

The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.

EPSS 0.10% · 27.9th percentile

Risk Scores

EPSS Score
0.10%
27.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-azure0, 4.11.0-1009.9, 4.11.0-1011.11
Ubuntu:16.04:LTSlinux-gcp0, 4.10.0-1004.4, 4.10.0-1006.6
Ubuntu:16.04:LTSlinux-hwe0, 4.8.0-36.36~16.04.1, 4.8.0-39.42~16.04.1

Timeline

References

Open in Interactive Console →