A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-develUpgrade microvm-kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade microvm-kernelUpgrade python-perfUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade microvm-kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Nov 5, 2021 | Sep 27, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Sep 27, 2021 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Sep 27, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 18, 2021 | Sep 23, 2021 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 16, 2021 | Sep 27, 2021 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfo | May 5, 2022 | Sep 27, 2021 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1118-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.15.0-166-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.15.0-1114-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1118-snapdragonUpgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-166-genericUpgrade linux-image-4.15.0-1101-raspi2Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1105-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-166-lowlatencyUpgrade linux-image-4.15.0-1129-azureUpgrade linux-image-gcpUpgrade linux-image-dell300xUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1085-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1033-dell300xUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1103-kvm | Jan 6, 2022 | Sep 27, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub