A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade rvUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-doc | Nov 4, 2024 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.218-206.860Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perf | Jun 26, 2024 | Aug 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 29, 2022 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Jan 3, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Mar 13, 2024 | Aug 29, 2022 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub