CVE-2018-10087: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architectur...

Security readout for executives and security teams

CVE-2018-10087 is a Linux kernel denial-of-service issue. A local user may be able to crash or disrupt a vulnerable system by hitting an integer edge case in process-wait handling. The sources do not show remote compromise, privilege escalation, or active exploitation. Exposure is most relevant for Linux hosts running kernels before 4.13 or affected backported distro kernels, where untrusted local users can execute code. Ubuntu and Debian published kernel security updates, so managed fleets should check distro package status rather than only upstream version numbers. Treat this as a routine but real availability risk. It does not justify emergency remote-compromise response based on the provided evidence, but affected shared Linux systems should be patched in the normal kernel update cycle. Mitigation focus: Apply the relevant vendor kernel security updates from Ubuntu, Debian, or your Linux distributor.; Verify whether the running kernel includes upstream commit dd83c161fbcc5d8be637ab159c0de015cbff5ba4 or a backport.; Prioritize systems with local users, shared shell access, or untrusted workloads..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.