Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Zhipeng Xie

#24244de 53,638
9.8CVSS total
Vulnerabilidades · 1
PT-2018-2601
9.8
2018-04-06
Linux · Linux Kernel · CVE-2018-20784
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.20.2 **Description** The issue is related to the implementation of the `update blocked averages()` function in the Linux kernel, which can lead to an infinite loop due to an unreachable exit condition. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is caused by the mishandling of leaf cfs rq's in the kernel/sched/fair.c file, allowing attackers to induce a high load and potentially have other unspecified impacts. **Recommendations** For Linux kernel versions prior to 4.20.2, update to version 4.20.2 or later to resolve the issue. As a temporary workaround, consider restricting system load to minimize the risk of exploitation.