The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perf | May 30, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Sep 25, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 12, 2020 | Mar 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-debug-base | Sep 23, 2021 | Mar 25, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-50-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-1016-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1006-awsUpgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-5.0.0-1006-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-lowlatency-hwe-16.04 | May 15, 2019 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub