CVE-2018-10675: The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cau...

Security readout for executives and security teams

CVE-2018-10675 is a Linux kernel flaw that can let a local user crash or destabilize a system. The public record identifies denial of service from a use-after-free and leaves other possible impact unspecified. Exposure is most likely on Linux systems running kernels before 4.12.9 or vendor kernels that had not backported the fix. Local access is required based on the CVE description. Treat as routine-to-priority kernel maintenance, higher where untrusted local users, shared hosting, or multi-user workloads exist. No source provided evidence of remote exploitation or active exploitation. Mitigation focus: Apply kernel updates from the relevant Linux distribution or vendor advisory.; Confirm the running kernel includes the upstream fix or a vendor backport.; Reboot systems after kernel updates where required..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.