CVE-2017-18204: Medium severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2017-18204?

CVE-2017-18204 is a local denial of service vulnerability that can cause a deadlock in the Linux kernel.

Q: How do I fix CVE-2017-18204?

To mitigate CVE-2017-18204, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.10-1.

Q: Which versions of the Linux kernel are affected by CVE-2017-18204?

CVE-2017-18204 affects the Linux kernel versions prior to 4.14.2.

Q: What is the impact of CVE-2017-18204?

The impact of CVE-2017-18204 is that it allows local users to trigger a denial of service by causing system deadlock.

Q: Is CVE-2017-18204 exploitable remotely?

CVE-2017-18204 is not remotely exploitable as it requires local user access to the system.

Published Feb 27, 2018

Updated

Last updated 4 July 2026

Other sources

The ocfs2setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.

— Launchpad

Affected Software

28 affected componentsFixes available

Linux Linux kernel<4.14.2

debian/linux

6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1

ubuntu/linux<3.13.0-149.199

3.13.0-149.199

ubuntu/linux-aws<4.4.0-1016.16

4.4.0-1016.16

ubuntu/linux-lts-xenial<4.4.0-119.143~14.04.1

4.4.0-119.143~14.04.1

ubuntu/linux<4.4.0-119.143

4.4.0-119.143

ubuntu/linux-aws<4.4.0-1054.63

4.4.0-1054.63

ubuntu/linux-azure<4.13.0-1014.17

4.13.0-1014.17

ubuntu/linux-gcp<4.13.0-1012.16

4.13.0-1012.16

ubuntu/linux-hwe<4.13.0-41.46~16.04.1

4.13.0-41.46~16.04.1

ubuntu/linux-kvm<4.4.0-1020.25

4.4.0-1020.25

ubuntu/linux-oem<4.13.0-1022.24

4.13.0-1022.24

ubuntu/linux-raspi2<4.4.0-1086.94

4.4.0-1086.94

ubuntu/linux-snapdragon<4.4.0-1088.93

4.4.0-1088.93

ubuntu/linux-fips<4.4.0-1008.10

4.4.0-1008.10

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-149.199
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1016.16
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-119.143~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-119.143
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1054.63
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.13.0-1014.17
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.13.0-1012.16
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.13.0-41.46~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1020.25
Upgrade
Upgrade ubuntu/linux-oem to a version that resolves this vulnerability.
Fixed in 4.13.0-1022.24
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1086.94
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1088.93
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1008.10

Event History

Feb 27, 2018

CVE Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

RemedyDescriptionSeverityAffected Software

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:29 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-18204?

CVE-2017-18204 is a local denial of service vulnerability that can cause a deadlock in the Linux kernel.

How do I fix CVE-2017-18204?

To mitigate CVE-2017-18204, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.10-1.

Which versions of the Linux kernel are affected by CVE-2017-18204?

CVE-2017-18204 affects the Linux kernel versions prior to 4.14.2.

What is the impact of CVE-2017-18204?

The impact of CVE-2017-18204 is that it allows local users to trigger a denial of service by causing system deadlock.

Is CVE-2017-18204 exploitable remotely?

CVE-2017-18204 is not remotely exploitable as it requires local user access to the system.

CVE-2017-18204: Medium severity Linux Linux kernel vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2017-18204?

How do I fix CVE-2017-18204?

Which versions of the Linux kernel are affected by CVE-2017-18204?

What is the impact of CVE-2017-18204?

Is CVE-2017-18204 exploitable remotely?

Company

Resources

Contact