kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfsquotaus is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
{ "vanir_signatures": [ { "target": { "function": "do_sched_cfs_slack_timer", "file": "kernel/sched/fair.c" }, "digest": { "length": 810.0, "function_hash": "239800966946814700751469942376026921999" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-0c92f5d2", "signature_type": "Function", "deprecated": false }, { "target": { "function": "assign_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 653.0, "function_hash": "179534685031015176513944743112908577537" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-0cd1cda0", "signature_type": "Function", "deprecated": false }, { "target": { "file": "kernel/sched/fair.c" }, "digest": { "line_hashes": [ "2014864958305326824168813638011606781", "325938763174636540345623063851588743409", "195888168162701757398901960279877851891", "330003173763814961713813758598290517420", "44364284674854891143906846501300006168", "200186701501609920777685332499186237222", "35784685579519276738455582003672403879", "72232244531582713906025896023618901325", "319644070549701921980784370632251410292", "182902719177946940041578788193304908410", "222503636809809072994497929482560314036", "254960207494271763869904339263916663988", "5187635514749928965177007333026538356", "315842684698049548531344462933426110858", "69496230906376048288877602095237791024", "105101444702977348872208781823189524699", "179610116383792301121039784987720798656", "17299300111003695518576647325259487454", "153087535888154445917848450057543356015", "105787289713421173264569681930750275186", "296013097116550376272985538190185191656", "143554394338722658992705759796516427558", "258280505406461053347734311601301867558", "5194598816849638785320981192537933816", "32199801042721774147753813516206290660", "257438395905541261904135354750673306768", "102165965577762319029741084691593064803", "75871519361947128389951518407585622115", "63836237563063313185899201654770930144", "337996952086044111185324989532843848957", "45966789446566986277936006235253615817", "154351307068551297833594560784242734507", "218225662097467388306609576012753497558", "12128745278238429273652634063992328115", "173432037683652575895918593789727288879", "297251355493064874667765110018830726860", "252004191092814767128647530510712481120", "338573675811231348787497611699191818429", "311090912484889145567414028650486948999", "196479566981351274190881143162927058153", "31375854875103818375304058524540477430", "197416852244016791679847583935467651688", "231081418504645040822544870686361725876", "121116575752161842189203072628900613788", "307549187224412120160462686183088740730", "54778184982815782200375150758101521461", "234788720404221947858171599124752314280", "108095851304460928255976442441276603663", "252266128634112638541749963237598997630", "241964057394152725655108974556570467427", "240033756388787813712353087683011996968", "243118413743051822155010086915470210050", "42634708856450237819952770132437704579", "39673408172926597654453624570686421218", "256698347955257242557479979863849273974", "270333195908525057172901344851433855141", "241934369975014282470833262711629454749", "87559020520540027547771825140155778954", "233242172184416737975733092975128327460", "57753534268283992372486712858113302302", "47684483733729049536614943115965115670", "266132900410082317494255817820542882940", "318601820404954146720071771137239441688", "256723514398520139118655113217358338376", "332479574074524830147057059769755894292", "265141813060169462855514690625900202630", "162264866509321892697680859514226512864", "44112934983946289584188783372973171360", "237794613015240435987137364743285392402", "74150670133171530577593446734190999365", "211433119228755266146148467768781269380", "100093353728155048853746813232193964863", "211172502802539424908801254263737386732", "263681020371490041811029594951787360573", "186534929346924014692690067482533622265", "225497483145798358330581837575840429033", "204905261186228131566928989077106387410", "147414814561993691679054115853005632314", "57052813950471439355133413106879261778", "279477250574486932768549281646736679675", "295635906807869655469939625270355059991", "119232182510113888981265489480551801805", "258399138769053074647669812587653128631", "283605823781167547076917264091633797065", "31727529245412136366476525410076578808", "313624461881345693040222890543180869520", "121773469683741494028201351736494508928" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-233a9066", "signature_type": "Line", "deprecated": false }, { "target": { "function": "__return_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 482.0, "function_hash": "42058259032428691515012737170809819647" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-34df8f05", "signature_type": "Function", "deprecated": false }, { "target": { "function": "__return_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 482.0, "function_hash": "42058259032428691515012737170809819647" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-3b7d4017", "signature_type": "Function", "deprecated": false }, { "target": { "function": "do_sched_cfs_period_timer", "file": "kernel/sched/fair.c" }, "digest": { "length": 849.0, "function_hash": "86149416501804854968224083275328767701" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-63eda07b", "signature_type": "Function", "deprecated": false }, { "target": { "function": "expire_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 373.0, "function_hash": "163693704055399239385188084000773685012" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-64be3976", "signature_type": "Function", "deprecated": false }, { "target": { "function": "__account_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 268.0, "function_hash": "102204258175389788035994743016541084821" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-6f80052f", "signature_type": "Function", "deprecated": false }, { "target": { "function": "__refill_cfs_bandwidth_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 254.0, "function_hash": "33457718769176401395731918789619946114" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-734e9609", "signature_type": "Function", "deprecated": false }, { "target": { "file": "kernel/sched/sched.h" }, "digest": { "line_hashes": [ "164020439900726997413089503317438601964", "299895821671550763038294710807236266301", "243236464766716382719588702644519656371", "312128919958833136832432725889471065408", "63007690675848655307063588359381370079", "145837244520152073815244659085279428505", "39670446157205841592300081430114024504", "45786708840165355673056546703568434659", "276785174469264113765384636007606760146", "23373960307766957249891996911897210987" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-770934a1", "signature_type": "Line", "deprecated": false }, { "target": { "function": "assign_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 653.0, "function_hash": "179534685031015176513944743112908577537" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-788f533a", "signature_type": "Function", "deprecated": false }, { "target": { "function": "distribute_cfs_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 627.0, "function_hash": "145480621377245595519067682510033127855" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-7b6a1d6b", "signature_type": "Function", "deprecated": false }, { "target": { "function": "expire_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 373.0, "function_hash": "163693704055399239385188084000773685012" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-7fcaddc7", "signature_type": "Function", "deprecated": false }, { "target": { "file": "kernel/sched/sched.h" }, "digest": { "line_hashes": [ "164020439900726997413089503317438601964", "299895821671550763038294710807236266301", "243236464766716382719588702644519656371", "312128919958833136832432725889471065408", "63007690675848655307063588359381370079", "145837244520152073815244659085279428505", "39670446157205841592300081430114024504", "45786708840165355673056546703568434659", "276785174469264113765384636007606760146", "23373960307766957249891996911897210987" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-917bad46", "signature_type": "Line", "deprecated": false }, { "target": { "function": "start_cfs_bandwidth", "file": "kernel/sched/fair.c" }, "digest": { "length": 374.0, "function_hash": "65064330650551048077187079696228692167" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-96b462b5", "signature_type": "Function", "deprecated": false }, { "target": { "function": "distribute_cfs_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 627.0, "function_hash": "145480621377245595519067682510033127855" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-a838bd2d", "signature_type": "Function", "deprecated": false }, { "target": { "function": "do_sched_cfs_slack_timer", "file": "kernel/sched/fair.c" }, "digest": { "length": 810.0, "function_hash": "239800966946814700751469942376026921999" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-bb50e7ae", "signature_type": "Function", "deprecated": false }, { "target": { "function": "__refill_cfs_bandwidth_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 254.0, "function_hash": "33457718769176401395731918789619946114" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-d3f5c36c", "signature_type": "Function", "deprecated": false }, { "target": { "function": "do_sched_cfs_period_timer", "file": "kernel/sched/fair.c" }, "digest": { "length": 849.0, "function_hash": "86149416501804854968224083275328767701" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-ed18b02a", "signature_type": "Function", "deprecated": false }, { "target": { "function": "start_cfs_bandwidth", "file": "kernel/sched/fair.c" }, "digest": { "length": 374.0, "function_hash": "65064330650551048077187079696228692167" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-ed9a201c", "signature_type": "Function", "deprecated": false }, { "target": { "function": "__account_cfs_rq_runtime", "file": "kernel/sched/fair.c" }, "digest": { "length": 268.0, "function_hash": "102204258175389788035994743016541084821" }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-fc1f6493", "signature_type": "Function", "deprecated": false }, { "target": { "file": "kernel/sched/fair.c" }, "digest": { "line_hashes": [ "2014864958305326824168813638011606781", "325938763174636540345623063851588743409", "195888168162701757398901960279877851891", "330003173763814961713813758598290517420", "44364284674854891143906846501300006168", "200186701501609920777685332499186237222", "35784685579519276738455582003672403879", "72232244531582713906025896023618901325", "319644070549701921980784370632251410292", "182902719177946940041578788193304908410", "222503636809809072994497929482560314036", "254960207494271763869904339263916663988", "5187635514749928965177007333026538356", "315842684698049548531344462933426110858", "69496230906376048288877602095237791024", "105101444702977348872208781823189524699", "179610116383792301121039784987720798656", "17299300111003695518576647325259487454", "153087535888154445917848450057543356015", "105787289713421173264569681930750275186", "296013097116550376272985538190185191656", "143554394338722658992705759796516427558", "258280505406461053347734311601301867558", "5194598816849638785320981192537933816", "32199801042721774147753813516206290660", "257438395905541261904135354750673306768", "102165965577762319029741084691593064803", "75871519361947128389951518407585622115", "63836237563063313185899201654770930144", "337996952086044111185324989532843848957", "45966789446566986277936006235253615817", "154351307068551297833594560784242734507", "218225662097467388306609576012753497558", "12128745278238429273652634063992328115", "173432037683652575895918593789727288879", "297251355493064874667765110018830726860", "252004191092814767128647530510712481120", "338573675811231348787497611699191818429", "311090912484889145567414028650486948999", "196479566981351274190881143162927058153", "31375854875103818375304058524540477430", "197416852244016791679847583935467651688", "231081418504645040822544870686361725876", "121116575752161842189203072628900613788", "307549187224412120160462686183088740730", "54778184982815782200375150758101521461", "234788720404221947858171599124752314280", "108095851304460928255976442441276603663", "252266128634112638541749963237598997630", "241964057394152725655108974556570467427", "240033756388787813712353087683011996968", "243118413743051822155010086915470210050", "42634708856450237819952770132437704579", "39673408172926597654453624570686421218", "256698347955257242557479979863849273974", "270333195908525057172901344851433855141", "241934369975014282470833262711629454749", "87559020520540027547771825140155778954", "233242172184416737975733092975128327460", "57753534268283992372486712858113302302", "47684483733729049536614943115965115670", "266132900410082317494255817820542882940", "318601820404954146720071771137239441688", "256723514398520139118655113217358338376", "332479574074524830147057059769755894292", "265141813060169462855514690625900202630", "162264866509321892697680859514226512864", "44112934983946289584188783372973171360", "237794613015240435987137364743285392402", "74150670133171530577593446734190999365", "211433119228755266146148467768781269380", "100093353728155048853746813232193964863", "211172502802539424908801254263737386732", "263681020371490041811029594951787360573", "186534929346924014692690067482533622265", "225497483145798358330581837575840429033", "204905261186228131566928989077106387410", "147414814561993691679054115853005632314", "57052813950471439355133413106879261778", "279477250574486932768549281646736679675", "295635906807869655469939625270355059991", "119232182510113888981265489480551801805", "258399138769053074647669812587653128631", "283605823781167547076917264091633797065", "31727529245412136366476525410076578808", "313624461881345693040222890543180869520", "121773469683741494028201351736494508928" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425", "id": "CVE-2019-19922-fed7aef8", "signature_type": "Line", "deprecated": false } ] }