A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade microvm-kernelUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade microvm-kernel-headersUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade microvm-kernel-debuginfoUpgrade kernelUpgrade microvm-kernel-develUpgrade python-perf-debuginfoUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Nov 5, 2021 | Sep 27, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Sep 27, 2021 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Sep 27, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 18, 2021 | Sep 23, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 16, 2021 | Sep 27, 2021 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-headers | May 5, 2022 | Sep 27, 2021 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-166-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1114-gcpUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gkeUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.15.0-166-generic-lpaeUpgrade linux-image-4.15.0-1118-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-1118-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1129-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1033-dell300xUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1085-oracleUpgrade linux-image-awsUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1105-kvmUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-166-lowlatencyUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1101-raspi2 | Jan 6, 2022 | Sep 27, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub