The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | May 30, 2019 | Mar 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Sep 25, 2019 | Mar 25, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 12, 2020 | Mar 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 25, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2019 | Mar 25, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-debug-base | Sep 23, 2021 | Mar 25, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1113-snapdragonUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-4.4.0-148-powerpc-e500mcUpgrade linux-image-5.0.0-15-genericUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.4.0-148-powerpc64-smpUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-148-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-4.4.0-148-lowlatencyUpgrade linux-image-4.4.0-148-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-5.0.0-1006-azureUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-148-powerpc64-embUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-4.4.0-1046-kvmUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-4.4.0-148-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1006-awsUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1109-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1083-aws | May 15, 2019 | Mar 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub