A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade microvm-kernel-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-debuginfoUpgrade microvm-kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade microvm-kernelUpgrade perfUpgrade kernel-tools | Nov 5, 2021 | Sep 27, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Sep 27, 2021 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Sep 27, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 18, 2021 | Sep 23, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 16, 2021 | Sep 27, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade perf-debuginfo | May 5, 2022 | Sep 27, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-166-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1033-dell300xUpgrade linux-image-4.15.0-1105-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1085-oracleUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1129-azureUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1101-raspi2Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-166-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-166-genericUpgrade linux-image-4.15.0-1114-gcpUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.15.0-1118-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1118-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-222-generic | Jan 6, 2022 | Sep 27, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub