CVE-2017-18202: The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operat...

Security readout for executives and security teams

This Linux kernel flaw can let an attacker crash or destabilize a vulnerable system by hitting a race window in memory pressure handling. The public sources describe denial of service and possible unspecified impact, but provide no CVSS score and no confirmed active exploitation. Exposure is most likely on systems running upstream Linux kernels before 4.14.4 or vendor kernels lacking the referenced fix. Distribution backports may change version-based assessment, so kernel package advisory status matters more than uname alone. Treat this as a normal kernel patching priority, elevated for shared or business-critical Linux systems. There is no source-supported evidence of active exploitation, but kernel denial of service can still create meaningful operational risk. Mitigation focus: Identify Linux hosts running kernels before 4.14.4 or unfixed vendor builds.; Apply vendor kernel updates that include the referenced upstream fix.; Review Red Hat RHSA-2018:2772 if managing affected Red Hat platforms..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.