In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 22, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 31, 2019 | Feb 22, 2019 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-macrosUpgrade kernel-default-kgraftUpgrade kernel-default-develUpgrade kernel-source | Aug 9, 2024 | Feb 22, 2019 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-azureUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1059-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc | Sep 3, 2019 | Feb 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub