The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfo | May 30, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Sep 25, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 12, 2020 | Mar 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-debug-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-default-extra | Sep 23, 2021 | Mar 25, 2019 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-gcpUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1006-azureUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-1046-kvm | May 15, 2019 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub