In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Link | Tags |
---|---|
https://github.com/torvalds/linux/commit/c40f7d74c741a907cfaeb73a7697081881c497d0 | third party advisory patch |
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c40f7d74c741a907cfaeb73a7697081881c497d0 | patch vendor advisory |
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.2 | release notes vendor advisory |
https://access.redhat.com/errata/RHSA-2019:1959 | third party advisory vendor advisory |
https://access.redhat.com/errata/RHSA-2019:1971 | third party advisory vendor advisory |
https://usn.ubuntu.com/4115-1/ | third party advisory vendor advisory |
https://usn.ubuntu.com/4118-1/ | third party advisory vendor advisory |
https://usn.ubuntu.com/4211-2/ | third party advisory vendor advisory |
https://usn.ubuntu.com/4211-1/ | third party advisory vendor advisory |