The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 4, 2019 | Mar 7, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 7, 2018 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-default | Mar 29, 2018 | Mar 7, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-149-lowlatencyUpgrade linux-image-3.13.0-149-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-149-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-149-genericUpgrade linux-image-3.13.0-149-powerpc64-embUpgrade linux-image-3.13.0-149-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-149-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-149-generic-lpae | May 31, 2018 | Mar 7, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub