CVE-2017-18221

5.5 mediumEPSS 0.5%

The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc
http://www.securityfocus.com/bid/103321
https://github.com/torvalds/linux/commit/70feee0e1ef331b22cc51f383d532a0d043fbdcc
https://usn.ubuntu.com/3655-1/
https://usn.ubuntu.com/3655-2/

Check your stack JSON