CVE-2019-19922
CVE-2019-19922
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
CVSS 5.5 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
linux Debian:12
- Affected ranges
- ECOSYSTEM: < 5.3.9-1
Update to 5.3.9-1
linux Debian:13
- Affected ranges
- ECOSYSTEM: < 5.3.9-1
Update to 5.3.9-1
linux Debian:14
- Affected ranges
- ECOSYSTEM: < 5.3.9-1
Update to 5.3.9-1
linux-azure Ubuntu:Pro:14.04:LTS
- Versions
- 4.15.0-1023.24~14.04.1
- 4.15.0-1030.31~14.04.1
- 4.15.0-1031.32~14.04.1
- 4.15.0-1032.33~14.04.2
- 4.15.0-1035.36~14.04.2
- 4.15.0-1036.38~14.04.2
- 4.15.0-1037.39~14.04.2
- 4.15.0-1039.41~14.04.2
- 4.15.0-1040.44~14.04.1
- 4.15.0-1041.45~14.04.1
- 4.15.0-1042.46~14.04.1
- 4.15.0-1045.49~14.04.1
- 4.15.0-1046.50~14.04.1
- 4.15.0-1047.51~14.04.1
- 4.15.0-1049.54~14.04.1
- 4.15.0-1050.55~14.04.1
- 4.15.0-1051.56~14.04.1
- 4.15.0-1052.57~14.04.1
- 4.15.0-1055.60~14.04.1
- 4.15.0-1056.61~14.04.1
- 4.15.0-1057.62~14.04.1
- 4.15.0-1059.64~14.04.1
- 4.15.0-1060.65~14.04.1
- 4.15.0-1061.66~14.04.1
- Affected ranges
- ECOSYSTEM: < 4.15.0-1063.68~14.04.1
Update to 4.15.0-1063.68~14.04.1
linux-aws-hwe Ubuntu:16.04:LTS
- Versions
- 4.15.0-1030.31~16.04.1
- 4.15.0-1031.33~16.04.1
- 4.15.0-1032.34~16.04.1
- 4.15.0-1033.35~16.04.1
- 4.15.0-1035.37~16.04.1
- 4.15.0-1036.38~16.04.1
- 4.15.0-1039.41~16.04.1
- 4.15.0-1040.42~16.04.1
- 4.15.0-1041.43~16.04.1
- 4.15.0-1043.45~16.04.1
- 4.15.0-1044.46~16.04.1
- 4.15.0-1045.47~16.04.1
- 4.15.0-1047.49~16.04.1
- 4.15.0-1048.50~16.04.1
- 4.15.0-1050.52~16.04.1
- 4.15.0-1051.53~16.04.1
- 4.15.0-1052.54~16.04.1
- Affected ranges
- ECOSYSTEM: < 4.15.0-1054.56~16.04.1
Update to 4.15.0-1054.56~16.04.1
linux-azure Ubuntu:16.04:LTS
- Versions
- 4.11.0-1009.9
- 4.11.0-1011.11
- 4.11.0-1013.13
- 4.11.0-1014.14
- 4.11.0-1015.15
- 4.11.0-1016.16
- 4.13.0-1005.7
- 4.13.0-1006.8
- 4.13.0-1007.9
- 4.13.0-1009.12
- 4.13.0-1011.14
- 4.13.0-1012.15
- 4.13.0-1014.17
- 4.13.0-1016.19
- 4.13.0-1018.21
- 4.15.0-1013.13~16.04.2
- 4.15.0-1014.14~16.04.1
- 4.15.0-1018.18~16.04.1
- 4.15.0-1019.19~16.04.1
- 4.15.0-1021.21~16.04.1
- 4.15.0-1022.22~16.04.1
- 4.15.0-1023.24~16.04.1
- 4.15.0-1025.26~16.04.1
- 4.15.0-1028.29~16.04.1
- 4.15.0-1030.31~16.04.1
- 4.15.0-1031.32~16.04.1
- 4.15.0-1032.33~16.04.1
- 4.15.0-1035.36~16.04.1
- 4.15.0-1036.38~16.04.1
- 4.15.0-1037.39~16.04.1
- 4.15.0-1039.43
- 4.15.0-1040.44
- 4.15.0-1041.45
- 4.15.0-1042.46
- 4.15.0-1045.49
- 4.15.0-1046.50
- 4.15.0-1047.51
- 4.15.0-1049.54
- 4.15.0-1050.55
- 4.15.0-1051.56
- 4.15.0-1052.57
- 4.15.0-1055.60
- 4.15.0-1056.61
- 4.15.0-1057.62
- 4.15.0-1059.64
- 4.15.0-1060.65
- 4.15.0-1061.66
- Affected ranges
- ECOSYSTEM: < 4.15.0-1063.68
Update to 4.15.0-1063.68
linux-gcp Ubuntu:16.04:LTS
- Versions
- 4.10.0-1004.4
- 4.10.0-1006.6
- 4.10.0-1007.7
- 4.10.0-1008.8
- 4.10.0-1009.9
- 4.13.0-1002.5
- 4.13.0-1006.9
- 4.13.0-1007.10
- 4.13.0-1008.11
- 4.13.0-1011.15
- 4.13.0-1012.16
- 4.13.0-1013.17
- 4.13.0-1015.19
- 4.13.0-1017.21
- 4.13.0-1019.23
- 4.15.0-1014.14~16.04.1
- 4.15.0-1015.15~16.04.1
- 4.15.0-1017.18~16.04.1
- 4.15.0-1018.19~16.04.2
- 4.15.0-1019.20~16.04.1
- 4.15.0-1021.22~16.04.1
- 4.15.0-1023.24~16.04.1
- 4.15.0-1024.25~16.04.2
- 4.15.0-1025.26~16.04.1
- 4.15.0-1026.27~16.04.1
- 4.15.0-1027.28~16.04.1
- 4.15.0-1028.29~16.04.1
- 4.15.0-1029.31~16.04.1
- 4.15.0-1030.32~16.04.1
- 4.15.0-1032.34~16.04.1
- 4.15.0-1033.35~16.04.1
- 4.15.0-1034.36~16.04.1
- 4.15.0-1036.38~16.04.1
- 4.15.0-1037.39~16.04.1
- 4.15.0-1040.42~16.04.1
- 4.15.0-1041.43
- 4.15.0-1042.44
- 4.15.0-1044.46
- 4.15.0-1046.49
- 4.15.0-1047.50
- Affected ranges
- ECOSYSTEM: < 4.15.0-1049.52
Update to 4.15.0-1049.52
linux-hwe Ubuntu:16.04:LTS
- Versions
- 4.8.0-36.36~16.04.1
- 4.8.0-39.42~16.04.1
- 4.8.0-41.44~16.04.1
- 4.8.0-42.45~16.04.1
- 4.8.0-44.47~16.04.1
- 4.8.0-45.48~16.04.1
- 4.8.0-46.49~16.04.1
- 4.8.0-49.52~16.04.1
- 4.8.0-51.54~16.04.1
- 4.8.0-52.55~16.04.1
- 4.8.0-53.56~16.04.1
- 4.8.0-54.57~16.04.1
- 4.8.0-56.61~16.04.1
- 4.8.0-58.63~16.04.1
- 4.10.0-27.30~16.04.2
- 4.10.0-28.32~16.04.2
- 4.10.0-30.34~16.04.1
- 4.10.0-32.36~16.04.1
- 4.10.0-33.37~16.04.1
- 4.10.0-35.39~16.04.1
- 4.10.0-37.41~16.04.1
- 4.10.0-38.42~16.04.1
- 4.10.0-40.44~16.04.1
- 4.10.0-42.46~16.04.1
- 4.13.0-26.29~16.04.2
- 4.13.0-31.34~16.04.1
- 4.13.0-32.35~16.04.1
- 4.13.0-36.40~16.04.1
- 4.13.0-37.42~16.04.1
- 4.13.0-38.43~16.04.1
- 4.13.0-39.44~16.04.1
- 4.13.0-41.46~16.04.1
- 4.13.0-43.48~16.04.1
- 4.13.0-45.50~16.04.1
- 4.15.0-24.26~16.04.1
- 4.15.0-29.31~16.04.1
- 4.15.0-30.32~16.04.1
- 4.15.0-32.35~16.04.1
- 4.15.0-33.36~16.04.1
- 4.15.0-34.37~16.04.1
- 4.15.0-36.39~16.04.1
- 4.15.0-38.41~16.04.1
- 4.15.0-39.42~16.04.1
- 4.15.0-42.45~16.04.1
- 4.15.0-43.46~16.04.1
- 4.15.0-45.48~16.04.1
- 4.15.0-46.49~16.04.1
- 4.15.0-47.50~16.04.1
- 4.15.0-48.51~16.04.1
- 4.15.0-50.54~16.04.1
- 4.15.0-51.55~16.04.1
- 4.15.0-52.56~16.04.1
- 4.15.0-54.58~16.04.1
- 4.15.0-55.60~16.04.2
- 4.15.0-58.64~16.04.1
- 4.15.0-60.67~16.04.1
- 4.15.0-62.69~16.04.1
- 4.15.0-64.73~16.04.1
- 4.15.0-65.74~16.04.1
- 4.15.0-66.75~16.04.1
- Affected ranges
- ECOSYSTEM: < 4.15.0-69.78~16.04.1
Update to 4.15.0-69.78~16.04.1
linux-oracle Ubuntu:16.04:LTS
- Versions
- 4.15.0-1007.9~16.04.1
- 4.15.0-1008.10~16.04.1
- 4.15.0-1009.11~16.04.1
- 4.15.0-1010.12~16.04.1
- 4.15.0-1011.13~16.04.1
- 4.15.0-1013.15~16.04.1
- 4.15.0-1014.16~16.04.1
- 4.15.0-1015.17~16.04.1
- 4.15.0-1017.19~16.04.2
- 4.15.0-1018.20~16.04.1
- 4.15.0-1021.23~16.04.1
- 4.15.0-1022.25~16.04.1
- 4.15.0-1023.26~16.04.1
- 4.15.0-1025.28~16.04.1
- 4.15.0-1026.29~16.04.1
- 4.15.0-1027.30~16.04.1
- Affected ranges
- ECOSYSTEM: < 4.15.0-1029.32~16.04.1
Update to 4.15.0-1029.32~16.04.1
linux-hwe-edge Ubuntu:16.04:LTS
- Versions
- 4.8.0-28.30~16.04.1
- 4.8.0-30.32~16.04.1
- 4.8.0-32.34~16.04.1
- 4.8.0-34.36~16.04.1
- 4.10.0-14.16~16.04.1
- 4.10.0-19.21~16.04.1
- 4.10.0-20.22~16.04.1
- 4.10.0-21.23~16.04.1
- 4.10.0-22.24~16.04.1
- 4.10.0-24.28~16.04.1
- 4.10.0-26.30~16.04.1
- 4.11.0-13.19~16.04.1
- 4.11.0-14.20~16.04.1
- 4.13.0-16.19~16.04.3
- 4.13.0-17.20~16.04.1
- 4.13.0-19.22~16.04.1
- 4.13.0-21.24~16.04.1
- 4.13.0-25.29~16.04.2
- 4.15.0-13.14~16.04.1
- 4.15.0-15.16~16.04.1
- 4.15.0-20.21~16.04.1
- 4.15.0-22.24~16.04.1
- 4.15.0-23.25~16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
linux Ubuntu:18.04:LTS
- Versions
- 4.13.0-16.19
- 4.13.0-17.20
- 4.13.0-25.29
- 4.13.0-32.35
- 4.15.0-10.11
- 4.15.0-12.13
- 4.15.0-13.14
- 4.15.0-15.16
- 4.15.0-19.20
- 4.15.0-20.21
- 4.15.0-22.24
- 4.15.0-23.25
- 4.15.0-24.26
- 4.15.0-29.31
- 4.15.0-30.32
- 4.15.0-32.35
- 4.15.0-33.36
- 4.15.0-34.37
- 4.15.0-36.39
- 4.15.0-38.41
- 4.15.0-39.42
- 4.15.0-42.45
- 4.15.0-43.46
- 4.15.0-44.47
- 4.15.0-45.48
- 4.15.0-46.49
- 4.15.0-47.50
- 4.15.0-48.51
- 4.15.0-50.54
- 4.15.0-51.55
- 4.15.0-52.56
- 4.15.0-54.58
- 4.15.0-55.60
- 4.15.0-58.64
- 4.15.0-60.67
- 4.15.0-62.69
- 4.15.0-64.73
- 4.15.0-65.74
- 4.15.0-66.75
- Affected ranges
- ECOSYSTEM: < 4.15.0-69.78
Update to 4.15.0-69.78
linux-aws Ubuntu:18.04:LTS
- Versions
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1007.7
- 4.15.0-1009.9
- 4.15.0-1010.10
- 4.15.0-1011.11
- 4.15.0-1016.16
- 4.15.0-1017.17
- 4.15.0-1019.19
- 4.15.0-1020.20
- 4.15.0-1021.21
- 4.15.0-1023.23
- 4.15.0-1025.25
- 4.15.0-1027.27
- 4.15.0-1029.30
- 4.15.0-1031.33
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- 4.15.0-1035.37
- 4.15.0-1037.39
- 4.15.0-1039.41
- 4.15.0-1040.42
- 4.15.0-1041.43
- 4.15.0-1043.45
- 4.15.0-1044.46
- 4.15.0-1045.47
- 4.15.0-1047.49
- 4.15.0-1048.50
- 4.15.0-1050.52
- 4.15.0-1051.53
- 4.15.0-1052.54
- Affected ranges
- ECOSYSTEM: < 4.15.0-1054.56
Update to 4.15.0-1054.56
linux-aws-5.0 Ubuntu:18.04:LTS
- Versions
- 5.0.0-1021.24~18.04.1
- 5.0.0-1022.25~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.0.0-1023.26~18.04.1
Update to 5.0.0-1023.26~18.04.1
linux-azure Ubuntu:18.04:LTS
- Versions
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1012.12
- 4.15.0-1013.13
- 4.15.0-1014.14
- 4.15.0-1018.18
- 4.15.0-1019.19
- 4.15.0-1021.21
- 4.15.0-1022.23
- 4.15.0-1023.24
- 4.15.0-1025.26
- 4.15.0-1028.29
- 4.15.0-1030.31
- 4.15.0-1031.32
- 4.15.0-1032.33
- 4.15.0-1035.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- 4.18.0-1011.11~18.04.1
- 4.18.0-1013.13~18.04.1
- 4.18.0-1014.14~18.04.1
- 4.18.0-1018.18~18.04.1
- 4.18.0-1019.19~18.04.1
- 4.18.0-1020.20~18.04.1
- 4.18.0-1023.24~18.04.1
- 4.18.0-1024.25~18.04.1
- 4.18.0-1025.27~18.04.1
- 5.0.0-1014.14~18.04.1
- 5.0.0-1016.17~18.04.1
- 5.0.0-1018.19~18.04.1
- 5.0.0-1020.21~18.04.1
- 5.0.0-1022.23~18.04.1
- 5.0.0-1023.24~18.04.1
- 5.0.0-1025.27~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.0.0-1027.29~18.04.1
Update to 5.0.0-1027.29~18.04.1
linux-azure-5.3 Ubuntu:18.04:LTS
- Versions
- 5.3.0-1007.8~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.3.0-1008.9~18.04.1
Update to 5.3.0-1008.9~18.04.1
linux-gcp Ubuntu:18.04:LTS
- Versions
- 4.15.0-1001.1
- 4.15.0-1003.3
- 4.15.0-1005.5
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1009.9
- 4.15.0-1010.10
- 4.15.0-1014.14
- 4.15.0-1015.15
- 4.15.0-1017.18
- 4.15.0-1018.19
- 4.15.0-1019.20
- 4.15.0-1021.22
- 4.15.0-1023.24
- 4.15.0-1024.25
- 4.15.0-1025.26
- 4.15.0-1026.27
- 4.15.0-1027.28
- 4.15.0-1028.29
- 4.15.0-1029.31
- 4.15.0-1030.32
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- 4.15.0-1040.42
- 4.15.0-1042.45
- 4.15.0-1044.70
- 5.0.0-1020.20~18.04.1
- 5.0.0-1021.21~18.04.1
- 5.0.0-1025.26~18.04.1
- 5.0.0-1026.27~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.0.0-1028.29~18.04.1
Update to 5.0.0-1028.29~18.04.1
linux-gcp-5.3 Ubuntu:18.04:LTS
- Versions
- 5.3.0-1008.9~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.3.0-1009.10~18.04.1
Update to 5.3.0-1009.10~18.04.1
linux-gke-4.15 Ubuntu:18.04:LTS
- Versions
- 4.15.0-1030.32
- 4.15.0-1032.34
- 4.15.0-1033.35
- 4.15.0-1034.36
- 4.15.0-1036.38
- 4.15.0-1037.39
- 4.15.0-1040.42
- 4.15.0-1041.43
- 4.15.0-1042.44
- 4.15.0-1044.46
- 4.15.0-1045.48
- 4.15.0-1046.49
- Affected ranges
- ECOSYSTEM: < 4.15.0-1048.51
Update to 4.15.0-1048.51
linux-gke-5.0 Ubuntu:18.04:LTS
- Versions
- 5.0.0-1011.11~18.04.1
- 5.0.0-1013.13~18.04.1
- 5.0.0-1015.15~18.04.1
- 5.0.0-1017.17~18.04.1
- 5.0.0-1020.20~18.04.1
- 5.0.0-1022.22~18.04.3
- 5.0.0-1023.23~18.04.2
- 5.0.0-1025.26~18.04.1
- 5.0.0-1026.27~18.04.2
- Affected ranges
- ECOSYSTEM: < 5.0.0-1027.28~18.04.1
Update to 5.0.0-1027.28~18.04.1
linux-hwe Ubuntu:18.04:LTS
- Versions
- 4.18.0-13.14~18.04.1
- 4.18.0-14.15~18.04.1
- 4.18.0-15.16~18.04.1
- 4.18.0-16.17~18.04.1
- 4.18.0-17.18~18.04.1
- 4.18.0-18.19~18.04.1
- 4.18.0-20.21~18.04.1
- 4.18.0-21.22~18.04.1
- 4.18.0-22.23~18.04.1
- 4.18.0-24.25~18.04.1
- 4.18.0-25.26~18.04.1
- 5.0.0-23.24~18.04.1
- 5.0.0-25.26~18.04.1
- 5.0.0-27.28~18.04.1
- 5.0.0-29.31~18.04.1
- 5.0.0-31.33~18.04.1
- 5.0.0-32.34~18.04.2
- 5.0.0-35.38~18.04.1
- 5.0.0-36.39~18.04.1
- 5.0.0-37.40~18.04.1
- Affected ranges
- ECOSYSTEM: < 5.3.0-26.28~18.04.1
Update to 5.3.0-26.28~18.04.1
linux-hwe-edge Ubuntu:18.04:LTS
- Versions
- 5.0.0-15.16~18.04.1
- 5.0.0-16.17~18.04.1
- 5.0.0-17.18~18.04.1
- 5.0.0-19.20~18.04.1
- 5.0.0-20.21~18.04.1
- 5.3.0-19.20~18.04.2
- 5.3.0-22.24~18.04.1
- 5.3.0-23.25~18.04.1
- 5.3.0-23.25~18.04.2
- Affected ranges
- ECOSYSTEM: < 5.3.0-24.26~18.04.2
Update to 5.3.0-24.26~18.04.2
linux-kvm Ubuntu:18.04:LTS
- Versions
- 4.15.0-1002.2
- 4.15.0-1003.3
- 4.15.0-1004.4
- 4.15.0-1006.6
- 4.15.0-1008.8
- 4.15.0-1010.10
- 4.15.0-1011.11
- 4.15.0-1012.12
- 4.15.0-1016.16
- 4.15.0-1017.17
- 4.15.0-1019.19
- 4.15.0-1020.20
- 4.15.0-1021.21
- 4.15.0-1023.23
- 4.15.0-1025.25
- 4.15.0-1026.26
- 4.15.0-1027.27
- 4.15.0-1028.28
- 4.15.0-1029.29
- 4.15.0-1030.30
- 4.15.0-1031.31
- 4.15.0-1032.32
- 4.15.0-1034.34
- 4.15.0-1035.35
- 4.15.0-1036.36
- 4.15.0-1038.38
- 4.15.0-1039.39
- 4.15.0-1042.42
- 4.15.0-1043.43
- 4.15.0-1044.44
- 4.15.0-1046.46
- 4.15.0-1047.47
- 4.15.0-1048.48
- Affected ranges
- ECOSYSTEM: < 4.15.0-1050.50
Update to 4.15.0-1050.50
linux-oem Ubuntu:18.04:LTS
- Versions
- 4.15.0-1002.3
- 4.15.0-1004.5
- 4.15.0-1006.9
- 4.15.0-1008.11
- 4.15.0-1009.12
- 4.15.0-1012.15
- 4.15.0-1013.16
- 4.15.0-1015.18
- 4.15.0-1017.20
- 4.15.0-1018.21
- 4.15.0-1021.24
- 4.15.0-1024.29
- 4.15.0-1026.31
- 4.15.0-1028.33
- 4.15.0-1030.35
- 4.15.0-1033.38
- 4.15.0-1034.39
- 4.15.0-1035.40
- 4.15.0-1036.41
- 4.15.0-1038.43
- 4.15.0-1039.44
- 4.15.0-1043.48
- 4.15.0-1045.50
- 4.15.0-1050.57
- 4.15.0-1056.65
- 4.15.0-1057.66
- 4.15.0-1059.68
- Affected ranges
- ECOSYSTEM: < 4.15.0-1063.72
Update to 4.15.0-1063.72
Original sources
- https://usn.ubuntu.com/4226-1/
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
- https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de53fd7aedb100f03e5d2231cfce0e4993282425
- https://relistan.com/the-kernel-may-be-slowing-down-your-app
- https://github.com/kubernetes/kubernetes/issues/67577
- https://security.netapp.com/advisory/ntap-20200204-0002/
- https://nvd.nist.gov/vuln/detail/CVE-2019-19922