{"id":"CVE-2018-1049","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-1049","generatedAt":"2026-10-28T20:07:50.948Z","title":"In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang.","description":"In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.","published":"2018-02-16T21:29:00.000Z","lastModified":"2026-06-17T01:50:22.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-362"],"affected":["systemd project/systemd","redhat/enterprise linux","redhat/enterprise linux aus","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","canonical/ubuntu linux","debian/debian linux"],"epss":{"score":0.07441,"percentile":0.94423,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (7.44%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securitytracker.com/id/1041520","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:0260","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534701","tags":["Issue Tracking","Patch","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/3558-1/","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1041520","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0260","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534701","tags":["Issue Tracking","Patch","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3558-1/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-1049","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}