In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 22, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 22, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 31, 2019 | Feb 22, 2019 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-default-kgraft | Aug 9, 2024 | Feb 22, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1059-awsUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-4.4.0-1126-raspi2 | Sep 3, 2019 | Feb 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub