In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
| CVE | CVE-2018-20784 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 4.2% en 30 días (percentil 91) |
| CWE | CWE-835 |
| Exposición (Shodan) | 41 host(s) expuesto(s) en internet ahora mismo |
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxlinux/linux_kernelredhat/enterprise_linuxredhat/enterprise_linux_for_real_time