CVE-2018-20784 In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspeci...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.19.16-1 | 4.19.16-1 |
| debian/linux(Debian:13) | < 4.19.16-1 | 4.19.16-1 |
| debian/linux(Debian:14) | < 4.19.16-1 | 4.19.16-1 |
| Linux kernel | >= 4.13, < 4.14.93 | 4.14.93 |
| Linux kernel | >= 4.19, < 4.19.15 | 4.19.15 |
| Linux kernel | >= 4.20, < 4.20.2 | 4.20.2 |
| Linux kernel | = 5.0-rc1 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| redhat enterprise linux | = 8.0 | No fix listed |
| redhat enterprise linux for real time | = 8 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-4115-1 vendor-advisory
- USN-4118-1 vendor-advisory
- USN-4211-1 vendor-advisory
- USN-4211-2 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-20784 vendor-advisory
- git.kernel.org patch vendor-advisory
- RHSA-2019:1959 third-party-advisory vendor-advisory
- RHSA-2019:1971 third-party-advisory vendor-advisory
- cdn.kernel.org release-notes vendor-advisory
- github.com patch third-party-advisory
- USN-4115-1 third-party-advisory vendor-advisory
- USN-4118-1 third-party-advisory vendor-advisory
- USN-4211-1 third-party-advisory vendor-advisory
- USN-4211-2 third-party-advisory vendor-advisory