CVE-2018-1000200
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000200
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1000200.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-1000200
- Related
- Published
- 2018-06-05T13:29:00Z
- Modified
- 2024-09-11T02:00:06Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exitmmap(), which calls munlockvmapagesall() for mlocked vmas.This can happen synchronously with the oom reaper's unmappagerange() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).
- References
-
- http://www.securityfocus.com/bid/104397
- https://access.redhat.com/errata/RHSA-2018:2948
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=27ae357fa82be5ab73b2ef8d39dcb8ca2563483a
- http://seclists.org/oss-sec/2018/q2/67
- https://marc.info/?l=linux-kernel&m=152400522806945
- https://marc.info/?l=linux-kernel&m=152460926619256
- https://access.redhat.com/security/cve/cve-2018-1000200
- https://usn.ubuntu.com/3752-1/
- https://usn.ubuntu.com/3752-2/
- https://usn.ubuntu.com/3752-3/
- https://security-tracker.debian.org/tracker/CVE-2018-1000200
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source