A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade microvm-kernel-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade microvm-kernel-debuginfoUpgrade microvm-kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade microvm-kernelUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Nov 5, 2021 | Sep 27, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Sep 27, 2021 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Sep 27, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 18, 2021 | Sep 23, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 16, 2021 | Sep 27, 2021 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modules | May 5, 2022 | Sep 27, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1101-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1085-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1129-azureUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1033-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1105-kvmUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-166-lowlatencyUpgrade linux-image-4.15.0-166-generic-lpaeUpgrade linux-image-4.15.0-166-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1118-awsUpgrade linux-image-4.15.0-1114-gcpUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1118-snapdragonUpgrade linux-image-4.4.0-1138-aws | Jan 6, 2022 | Sep 27, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub