CVE-2017-18255: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation.

Affected products

• Linux Linux Kernel: before 4.11 (fixed in 4.11)

Published 2018-03-31. Last modified 2026-06-17.