CVE-2018-20784

In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in…

published February 22, 2019

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

⚠️ A flaw in the Linux kernel's scheduling can trigger an infinite loop, making your system sluggish like a snail on a vacation! 🐌 Think of it as a busy restaurant kitchen where one chef mistakenly keeps adding to an order without checking if there’s actually food to prepare. This clogs the workflow, causing all orders to back up and grind to a halt, wasting time and ingredients. An attacker could exploit this flaw to cause a denial of service, leading to system slowdowns or even complete unresponsiveness. While there’s no known exploitation in the wild yet, it’s a ticking time bomb that could impact performance if triggered under high load.

Put simply

Think of it as a busy restaurant kitchen where one chef mistakenly keeps adding to an order without checking if there’s actually food to prepare. This clogs the workflow, causing all orders to back up and grind to a halt, wasting time and ingredients. In the Linux kernel versions before 4.20.2, a mishandling of the leaf cfs_rq's in the scheduling code can lead to an infinite loop in the update_blocked_averages function, resulting in a denial of service.

What to do

An attacker could exploit this flaw to cause a denial of service, leading to system slowdowns or even complete unresponsiveness. While there’s no known exploitation in the wild yet, it’s a ticking time bomb that could impact performance if triggered under high load. Update your Linux kernel to version 4.20.2 or later to mitigate this issue. It’s also a good idea to monitor load levels and ensure efficient task scheduling to prevent performance degradation. 🛡️ You’ve got this! Just patch up and keep your systems running smoothly! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04173 · 90.8th percentile
Published
2019-02-22T15:00Z
EPSS history
Timeline
  • 22 FEB 15:00Z
    In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in…
    cvelistv5