The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 4, 2019 | Mar 7, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2018 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-default | Mar 29, 2018 | Mar 7, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-149-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-149-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-3.13.0-149-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-149-powerpc-smpUpgrade linux-image-3.13.0-149-lowlatencyUpgrade linux-image-3.13.0-149-powerpc64-smpUpgrade linux-image-3.13.0-149-genericUpgrade linux-image-3.13.0-149-powerpc64-embUpgrade linux-image-powerpc64-emb | May 31, 2018 | Mar 7, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub