imPC@ndo IT

Tracker / CVE-2017-18202

CVE-2017-18202

High 7.0

The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.

Affected products and versions

linux linux_kernel · 4.10 → 4.14.4
linux linux_kernel · 4.6 → 4.9.68

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References