A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-64kUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matched | Nov 4, 2024 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 26, 2024 | Aug 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 29, 2022 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Jan 3, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Mar 13, 2024 | Aug 29, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub