CVE-2017-18232: Medium severity Linux Linux kernel vulnerability
Last updated 18 March 2026
Other sources
The Serial Attached SCSI (SAS) implementation in the Linux kernel mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code.
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d
— Red Hat
The Serial Attached SCSI (SAS) implementation in the Linux kernel thro ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 0558f33c06bb910e2879e355192227a8e8f0219d
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2017-18232.
What is the severity level of CVE-2017-18232?
CVE-2017-18232 has a severity level of low.
How does CVE-2017-18232 affect the Linux kernel?
CVE-2017-18232 affects the Linux kernel through version 4.15.9.
What is the impact of CVE-2017-18232?
CVE-2017-18232 can cause a denial of service (deadlock) by triggering certain error-handling code.
How can I fix CVE-2017-18232?
To fix CVE-2017-18232, update your Linux kernel to version 4.16 or higher.