Oval Definition:oval:com.ubuntu.xenial:def:201610723000
Revision Date:2018-06-21Version:1
Title:CVE-2016-10723 on Ubuntu 16.04 LTS (xenial) - medium.
Description:** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurrent page fault events) when the global OOM killer is invoked. NOTE: the software maintainer has not accepted certain proposed patches, in part because of a viewpoint that "the underlying problem is non-trivial to handle."
Family:unixClass:vulnerability
Status:Reference(s):CVE-2016-10723
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND Package Information
  • The 'linux' package in xenial is affected and needs fixing.
  • OR The 'linux-aws' package in xenial is affected and needs fixing.
  • OR The 'linux-aws-hwe' package in xenial is affected and needs fixing.
  • OR The 'linux-azure' package in xenial is affected and needs fixing.
  • OR The 'linux-azure-edge' package in xenial is affected and needs fixing.
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needed ESM criteria').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR The 'linux-gcp' package in xenial is affected and needs fixing.
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage now end-of-life').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage now end-of-life').
  • OR The 'linux-hwe' package in xenial is affected and needs fixing.
  • OR The 'linux-hwe-edge' package in xenial is affected and needs fixing.
  • OR The 'linux-kvm' package in xenial is affected and needs fixing.
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned').
  • OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needed now end-of-life').
  • OR The 'linux-oracle' package in xenial is affected and needs fixing.
  • OR The 'linux-raspi2' package in xenial is affected and needs fixing.
  • OR The 'linux-snapdragon' package in xenial is affected and needs fixing.
  • BACK