The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | May 30, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Sep 25, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Mar 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-default-manUpgrade kernel-kvmsmall-baseUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extra | Sep 23, 2021 | Mar 25, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1006-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1045-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-50-lowlatency | May 15, 2019 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub