The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 24, 2017 | Nov 27, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 14, 2017 | Nov 5, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade gfs2-kmp-default | Apr 5, 2017 | Nov 27, 2016 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-64-powerpc64-smpUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.4.0-64-powerpc64-embUpgrade linux-image-4.4.0-1048-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-64-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-64-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-4.4.0-64-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-64-powerpc-e500mcUpgrade linux-image-4.4.0-64-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae | Feb 23, 2017 | Nov 27, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub