CVE-2017-18232 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-18232 Interim 1 20 2025-05-17T23:39:59Z current 2021-05-30T14:05:34Z 2025-05-17T23:39:59Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-18232 The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Liberty Linux 7 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Real Time Module 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 bpftool-3.10.0-957.el7 kernel-3.10.0-957.el7 kernel-abi-whitelists-3.10.0-957.el7 kernel-debug-3.10.0-957.el7 kernel-debug-devel-3.10.0-957.el7 kernel-default kernel-default-devel kernel-devel kernel-devel-3.10.0-957.el7 kernel-devel-rt kernel-doc-3.10.0-957.el7 kernel-headers-3.10.0-957.el7 kernel-macros kernel-rt kernel-source kernel-source-rt kernel-tools-3.10.0-957.el7 kernel-tools-libs-3.10.0-957.el7 kernel-tools-libs-devel-3.10.0-957.el7 perf-3.10.0-957.el7 python-perf-3.10.0-957.el7 bpftool-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-abi-whitelists-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-debug-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-debug-devel-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-devel-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-doc-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-headers-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-tools-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-tools-libs-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-tools-libs-devel-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 perf-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 python-perf-3.10.0-957.el7 as a component of SUSE Liberty Linux 7 kernel-default as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-default as a component of SUSE Linux Enterprise Micro 5.2 kernel-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-devel-rt as a component of SUSE Real Time Module 15 SP2 kernel-source-rt as a component of SUSE Real Time Module 15 SP2 The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code. CVE-2017-18232 SUSE Liberty Linux 7:bpftool-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-abi-whitelists-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-debug-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-debug-devel-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-devel-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-doc-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-headers-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-tools-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-tools-libs-3.10.0-957.el7 SUSE Liberty Linux 7:kernel-tools-libs-devel-3.10.0-957.el7 SUSE Liberty Linux 7:perf-3.10.0-957.el7 SUSE Liberty Linux 7:python-perf-3.10.0-957.el7 SUSE Linux Enterprise Micro 5.1:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-rt SUSE Linux Enterprise Micro 5.2:kernel-default SUSE Linux Enterprise Micro 5.2:kernel-rt SUSE Linux Enterprise Module for Basesystem 15 SP2:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP2:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP2:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP2:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP2:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP2:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP2:kernel-source SUSE Real Time Module 15 SP2:kernel-devel-rt SUSE Real Time Module 15 SP2:kernel-source-rt low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P 3.1 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L