PT-2018-6737

CVE-2017-18208

·

Published

2017-12-08

·

Updated

2019-10-03

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.4
Description: The issue allows local users to cause a denial of service, resulting in an infinite loop. This is achieved by triggering the use of MADVISE WILLNEED for a DAX mapping through the madvise willneed function in mm/madvise.c.
Recommendations: For Linux kernel versions prior to 4.14.4, update to version 4.14.4 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')
Related identifiers
CVE-2017-18208
ALT-PU-2017-2771
ALT-PU-2018-1991
CESA-2018_3083
OPENSUSE-SU-2018_0781-1
RHSA-2018:2948
RHSA-2018:3083
RHSA-2018_3083
RHSA-2018:3096
RHSA-2018_3096
RHSA-2019:3967
RHSA-2019:4057
RHSA-2019:4058
SUSE-SU-2018:0785-1
SUSE-SU-2018:0786-1
SUSE-SU-2018:0834-1
SUSE-SU-2018:0848-1
SUSE-SU-2018:0986-1
SUSE-SU-2018:1080-1
SUSE-SU-2018:1172-1
SUSE-SU-2018:1309-1
USN-3619-1
USN-3619-2
USN-3653-1
USN-3653-2
USN-3655-1
USN-3655-2
USN-3657-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com