5.5

CVE-2017-18204: linux linux_kernel

CVSS: 5.5v3.0MediumModified
AliasesUBUNTU-CVE-2017-18204DEBIAN-CVE-2017-18204
Published 27-02-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-18204 is a medium (CVSS 5.5) vulnerability in linux linux_kernel. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 38.2% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.0 (NVD)
EPSS score
0.45%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 8
SUSE-SU-2018:0834-1SUSE-SU-2018:0848-1SUSE-SU-2020:3501-1SUSE-SU-2020:3503-1USN-3617-2USN-3619-1

Timeline

  1. 27-02-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.45%

Chance of exploitation in the next 30 days

Percentile

38%

Versus all other CVEs

30-day change

0.00 pp

From 0.45% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu22 products
  • linux< 3.13.0-149.199 | < 4.4.0-119.143
  • linux-aws< 4.4.0-1016.16 | < 4.4.0-1054.63
  • linux-azure< 4.13.0-1014.17
  • linux-azure-6.11All versions (No fix recorded)
  • linux-azure-fdeAll versions (No fix recorded)
Debian1 product
  • linux< 4.14.2-1
Linux1 product

3 vendors · 24 products

References

21 links
Show all 21 references