CVE-2017-18595: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.

Affected products

• Linux Linux Kernel: from 3.10, before 3.16.55 (fixed in 3.16.55); from 3.17, before 3.18.91 (fixed in 3.18.91); from 3.19, before 4.1.50 (fixed in 4.1.50); from 4.2, before 4.4.109 (fixed in 4.4.109); from 4.5, before 4.9.74 (fixed in 4.9.74); from 4.10, before 4.14.11 (fixed in 4.14.11)
• Opensuse Leap: version 15.0 only; version 15.1 only

Published 2019-09-04. Last modified 2026-06-17.