What’s Vulnerable › Vulnerabilities

CVE-2017-15128

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-14 · updated 2026-06-17
• Weakness: CWE-119

Description

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).

Affected products

• Linux kernel: through 4.13.11
• Red Hat Enterprise Linux: 7.0
• RedHat Enterprise Mrg: 2.0

References

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
• https://access.redhat.com/security/cve/CVE-2017-15128
• https://bugzilla.redhat.com/show_bug.cgi?id=1525222
• https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
• https://access.redhat.com/security/cve/CVE-2017-15128
• https://bugzilla.redhat.com/show_bug.cgi?id=1525222
• https://github.com/torvalds/linux/commit/1e3921471354244f70fe268586ff94a97a6dd4df
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12

Get alerted when CVE-2017-15128 or the next vulnerability affects your stack