CVE-2017-18202
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles...
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
CVE-2017-18202- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
CVE-2017-18202- Updated
- 2026-11-02
EUVDEUVD-2017-9335 No score
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
EUVD-2017-9335- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wrf2-jc8v-7g96
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles...
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
GHSA-wrf2-jc8v-7g96- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
CVE-2017-18202- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-18202
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
DEBIAN-CVE-2017-18202- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:2772
Red Hat Security Advisory: kernel-alt security and bug fix update
- Record
RHSA-2018:2772- CVSS 3.0
- 6.7 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-18202
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
- Record
UBUNTU-CVE-2017-18202- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 4.14.7-1 | 4.14.7-1 |
linuxDebian:13 |
before 4.14.7-1 | 4.14.7-1 |
linuxDebian:14 |
before 4.14.7-1 | 4.14.7-1 |
kernelRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-abi-whitelistsRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-altRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-bootwrapperRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debugRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debug-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debug-develRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-develRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-docRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-headersRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-kdumpRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-kdump-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-kdump-develRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-toolsRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-tools-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-tools-libsRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
perfRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
python-perfRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
python-perf-debuginfoRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
kernel-tools-libs-develRed Hat:enterprise_linux:7::server |
before 0:4.14.0-49.13.1.el7a | 0:4.14.0-49.13.1.el7a |
linux-azureUbuntu:16.04:LTS |
before 4.15.0-1013.13~16.04.2, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 10 moreShow less4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.21 |
4.15.0-1013.13~16.04.2 |
linux-gcpUbuntu:16.04:LTS |
before 4.15.0-1014.14~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 10 moreShow less4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.23 |
4.15.0-1014.14~16.04.1 |
linux-hweUbuntu:16.04:LTS |
before 4.15.0-24.26~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 29 moreShow less4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.1 |
4.15.0-24.26~16.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-18202 is a high vulnerability (CVSS 7.0) in Linux Kernel, published February 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in linux 4.14.7-1.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=687cb0884a714ff484d038e9190edc874edcf146
github.com/torvalds/linux/commit/687cb0884a714ff484d038e9190edc874edcf146
kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4
securityfocus.com/bid/103161
access.redhat.com/errata/RHSA-2018:2772
nvd.nist.gov/vuln/detail/CVE-2017-18202
Show 8 moreShow less
security-tracker.debian.org/tracker/CVE-2017-18202
bugzilla.redhat.com/show_bug.cgi?id=1549621
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2772.json
cve.org/CVERecord?id=CVE-2017-18202
ubuntu.com/security/CVE-2017-18202