The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exit_mmap(), which calls munlock_vma_pages_all() for mlocked vmas.This can happen synchronously with the oom reaper's unmap_page_range() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Jun 5, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 5, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Jun 5, 2018 |
| Suse | — | Upgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extra | Jul 29, 2018 | Jun 5, 2018 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1022-azureUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-4.15.0-1020-kvm | Aug 31, 2018 | Jun 5, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub