CVE-2017-18216: Null Pointer Dereference
Published Mar 5, 2018
·Updated
In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.
Affected Software
2 affected componentsFixes available
Linux Linux kernel<4.15
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1
Event History
Mar 5, 2018
CVE Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2017-18216.
2
What is the severity of CVE-2017-18216?
The severity of CVE-2017-18216 is not specified.
3
How can local users exploit CVE-2017-18216?
Local users can exploit CVE-2017-18216 to cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.
4
What is the affected software?
The affected software includes Linux kernel versions before 4.15.
5
How can I fix CVE-2017-18216?
To fix CVE-2017-18216, update your Linux kernel to version 4.15 or later.