The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 6, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel | May 30, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Sep 25, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Mar 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-debug-baseUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-obs-buildUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-docsUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-default-extra | Sep 23, 2021 | Mar 25, 2019 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-gcpUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1006-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-4.4.0-1083-awsUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1006-azureUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenial | May 15, 2019 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub