CVE-2018-1000200
- State
- Published
- Severity
- Not scored
- Published
- Jun 5, 2018
- Updated
- Aug 5, 2024
- Reserved
- Apr 17, 2018
Description
The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exit_mmap(), which calls munlock_vma_pages_all() for mlocked vmas.This can happen synchronously with the oom reaper's unmap_page_range() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3752-2vendor-advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=27ae357fa82be5ab73b2ef8d39dcb8ca2563483a
- USN-3752-3vendor-advisory
- https://access.redhat.com/security/cve/cve-2018-1000200
- [linux-kernel] 20180424 [patch v3 for-4.17] mm, oom: fix concurrent munlock and oom reaper unmapmailing-list
- RHSA-2018:2948vendor-advisory
- 104397vdb-entry
- [linux-kernel] 20180417 [patch] mm, oom: fix concurrent munlock and oom reaper unmapmailing-list
- USN-3752-1vendor-advisory
- [oss-security] 20180424 CVE-2018-1000200 (Linux): Bad memory access on oom kill of large mlocked processmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.