In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 22, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 31, 2019 | Feb 22, 2019 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-default-kgraftUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-devel | Aug 9, 2024 | Feb 22, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-60-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1047-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-4.4.0-1059-awsUpgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-azureUpgrade linux-image-raspi2 | Sep 3, 2019 | Feb 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub