CVE-2018-13053: Canonical Ubuntu Linux

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: up to and including 4.17.3

Published 2018-07-02. Last modified 2026-06-17.