kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfsquotaus is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
[
    {
        "id": "CVE-2019-19922-233a9066",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "kernel/sched/fair.c"
        },
        "digest": {
            "line_hashes": [
                "2014864958305326824168813638011606781",
                "325938763174636540345623063851588743409",
                "195888168162701757398901960279877851891",
                "330003173763814961713813758598290517420",
                "44364284674854891143906846501300006168",
                "200186701501609920777685332499186237222",
                "35784685579519276738455582003672403879",
                "72232244531582713906025896023618901325",
                "319644070549701921980784370632251410292",
                "182902719177946940041578788193304908410",
                "222503636809809072994497929482560314036",
                "254960207494271763869904339263916663988",
                "5187635514749928965177007333026538356",
                "315842684698049548531344462933426110858",
                "69496230906376048288877602095237791024",
                "105101444702977348872208781823189524699",
                "179610116383792301121039784987720798656",
                "17299300111003695518576647325259487454",
                "153087535888154445917848450057543356015",
                "105787289713421173264569681930750275186",
                "296013097116550376272985538190185191656",
                "143554394338722658992705759796516427558",
                "258280505406461053347734311601301867558",
                "5194598816849638785320981192537933816",
                "32199801042721774147753813516206290660",
                "257438395905541261904135354750673306768",
                "102165965577762319029741084691593064803",
                "75871519361947128389951518407585622115",
                "63836237563063313185899201654770930144",
                "337996952086044111185324989532843848957",
                "45966789446566986277936006235253615817",
                "154351307068551297833594560784242734507",
                "218225662097467388306609576012753497558",
                "12128745278238429273652634063992328115",
                "173432037683652575895918593789727288879",
                "297251355493064874667765110018830726860",
                "252004191092814767128647530510712481120",
                "338573675811231348787497611699191818429",
                "311090912484889145567414028650486948999",
                "196479566981351274190881143162927058153",
                "31375854875103818375304058524540477430",
                "197416852244016791679847583935467651688",
                "231081418504645040822544870686361725876",
                "121116575752161842189203072628900613788",
                "307549187224412120160462686183088740730",
                "54778184982815782200375150758101521461",
                "234788720404221947858171599124752314280",
                "108095851304460928255976442441276603663",
                "252266128634112638541749963237598997630",
                "241964057394152725655108974556570467427",
                "240033756388787813712353087683011996968",
                "243118413743051822155010086915470210050",
                "42634708856450237819952770132437704579",
                "39673408172926597654453624570686421218",
                "256698347955257242557479979863849273974",
                "270333195908525057172901344851433855141",
                "241934369975014282470833262711629454749",
                "87559020520540027547771825140155778954",
                "233242172184416737975733092975128327460",
                "57753534268283992372486712858113302302",
                "47684483733729049536614943115965115670",
                "266132900410082317494255817820542882940",
                "318601820404954146720071771137239441688",
                "256723514398520139118655113217358338376",
                "332479574074524830147057059769755894292",
                "265141813060169462855514690625900202630",
                "162264866509321892697680859514226512864",
                "44112934983946289584188783372973171360",
                "237794613015240435987137364743285392402",
                "74150670133171530577593446734190999365",
                "211433119228755266146148467768781269380",
                "100093353728155048853746813232193964863",
                "211172502802539424908801254263737386732",
                "263681020371490041811029594951787360573",
                "186534929346924014692690067482533622265",
                "225497483145798358330581837575840429033",
                "204905261186228131566928989077106387410",
                "147414814561993691679054115853005632314",
                "57052813950471439355133413106879261778",
                "279477250574486932768549281646736679675",
                "295635906807869655469939625270355059991",
                "119232182510113888981265489480551801805",
                "258399138769053074647669812587653128631",
                "283605823781167547076917264091633797065",
                "31727529245412136366476525410076578808",
                "313624461881345693040222890543180869520",
                "121773469683741494028201351736494508928"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-3b7d4017",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__return_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "42058259032428691515012737170809819647",
            "length": 482.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-6f80052f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__account_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "102204258175389788035994743016541084821",
            "length": 268.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-788f533a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "assign_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "179534685031015176513944743112908577537",
            "length": 653.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-7fcaddc7",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "expire_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "163693704055399239385188084000773685012",
            "length": 373.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-917bad46",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "kernel/sched/sched.h"
        },
        "digest": {
            "line_hashes": [
                "164020439900726997413089503317438601964",
                "299895821671550763038294710807236266301",
                "243236464766716382719588702644519656371",
                "312128919958833136832432725889471065408",
                "63007690675848655307063588359381370079",
                "145837244520152073815244659085279428505",
                "39670446157205841592300081430114024504",
                "45786708840165355673056546703568434659",
                "276785174469264113765384636007606760146",
                "23373960307766957249891996911897210987"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-a838bd2d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "distribute_cfs_runtime"
        },
        "digest": {
            "function_hash": "145480621377245595519067682510033127855",
            "length": 627.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-bb50e7ae",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "do_sched_cfs_slack_timer"
        },
        "digest": {
            "function_hash": "239800966946814700751469942376026921999",
            "length": 810.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-d3f5c36c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__refill_cfs_bandwidth_runtime"
        },
        "digest": {
            "function_hash": "33457718769176401395731918789619946114",
            "length": 254.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-ed18b02a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "do_sched_cfs_period_timer"
        },
        "digest": {
            "function_hash": "86149416501804854968224083275328767701",
            "length": 849.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-ed9a201c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "start_cfs_bandwidth"
        },
        "digest": {
            "function_hash": "65064330650551048077187079696228692167",
            "length": 374.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425"
    }
]
                [
    {
        "id": "CVE-2019-19922-0c92f5d2",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "do_sched_cfs_slack_timer"
        },
        "digest": {
            "function_hash": "239800966946814700751469942376026921999",
            "length": 810.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-0cd1cda0",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "assign_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "179534685031015176513944743112908577537",
            "length": 653.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-34df8f05",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__return_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "42058259032428691515012737170809819647",
            "length": 482.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-63eda07b",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "do_sched_cfs_period_timer"
        },
        "digest": {
            "function_hash": "86149416501804854968224083275328767701",
            "length": 849.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-64be3976",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "expire_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "163693704055399239385188084000773685012",
            "length": 373.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-734e9609",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__refill_cfs_bandwidth_runtime"
        },
        "digest": {
            "function_hash": "33457718769176401395731918789619946114",
            "length": 254.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-770934a1",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "kernel/sched/sched.h"
        },
        "digest": {
            "line_hashes": [
                "164020439900726997413089503317438601964",
                "299895821671550763038294710807236266301",
                "243236464766716382719588702644519656371",
                "312128919958833136832432725889471065408",
                "63007690675848655307063588359381370079",
                "145837244520152073815244659085279428505",
                "39670446157205841592300081430114024504",
                "45786708840165355673056546703568434659",
                "276785174469264113765384636007606760146",
                "23373960307766957249891996911897210987"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-7b6a1d6b",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "distribute_cfs_runtime"
        },
        "digest": {
            "function_hash": "145480621377245595519067682510033127855",
            "length": 627.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-96b462b5",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "start_cfs_bandwidth"
        },
        "digest": {
            "function_hash": "65064330650551048077187079696228692167",
            "length": 374.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-fc1f6493",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "kernel/sched/fair.c",
            "function": "__account_cfs_rq_runtime"
        },
        "digest": {
            "function_hash": "102204258175389788035994743016541084821",
            "length": 268.0
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    },
    {
        "id": "CVE-2019-19922-fed7aef8",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "kernel/sched/fair.c"
        },
        "digest": {
            "line_hashes": [
                "2014864958305326824168813638011606781",
                "325938763174636540345623063851588743409",
                "195888168162701757398901960279877851891",
                "330003173763814961713813758598290517420",
                "44364284674854891143906846501300006168",
                "200186701501609920777685332499186237222",
                "35784685579519276738455582003672403879",
                "72232244531582713906025896023618901325",
                "319644070549701921980784370632251410292",
                "182902719177946940041578788193304908410",
                "222503636809809072994497929482560314036",
                "254960207494271763869904339263916663988",
                "5187635514749928965177007333026538356",
                "315842684698049548531344462933426110858",
                "69496230906376048288877602095237791024",
                "105101444702977348872208781823189524699",
                "179610116383792301121039784987720798656",
                "17299300111003695518576647325259487454",
                "153087535888154445917848450057543356015",
                "105787289713421173264569681930750275186",
                "296013097116550376272985538190185191656",
                "143554394338722658992705759796516427558",
                "258280505406461053347734311601301867558",
                "5194598816849638785320981192537933816",
                "32199801042721774147753813516206290660",
                "257438395905541261904135354750673306768",
                "102165965577762319029741084691593064803",
                "75871519361947128389951518407585622115",
                "63836237563063313185899201654770930144",
                "337996952086044111185324989532843848957",
                "45966789446566986277936006235253615817",
                "154351307068551297833594560784242734507",
                "218225662097467388306609576012753497558",
                "12128745278238429273652634063992328115",
                "173432037683652575895918593789727288879",
                "297251355493064874667765110018830726860",
                "252004191092814767128647530510712481120",
                "338573675811231348787497611699191818429",
                "311090912484889145567414028650486948999",
                "196479566981351274190881143162927058153",
                "31375854875103818375304058524540477430",
                "197416852244016791679847583935467651688",
                "231081418504645040822544870686361725876",
                "121116575752161842189203072628900613788",
                "307549187224412120160462686183088740730",
                "54778184982815782200375150758101521461",
                "234788720404221947858171599124752314280",
                "108095851304460928255976442441276603663",
                "252266128634112638541749963237598997630",
                "241964057394152725655108974556570467427",
                "240033756388787813712353087683011996968",
                "243118413743051822155010086915470210050",
                "42634708856450237819952770132437704579",
                "39673408172926597654453624570686421218",
                "256698347955257242557479979863849273974",
                "270333195908525057172901344851433855141",
                "241934369975014282470833262711629454749",
                "87559020520540027547771825140155778954",
                "233242172184416737975733092975128327460",
                "57753534268283992372486712858113302302",
                "47684483733729049536614943115965115670",
                "266132900410082317494255817820542882940",
                "318601820404954146720071771137239441688",
                "256723514398520139118655113217358338376",
                "332479574074524830147057059769755894292",
                "265141813060169462855514690625900202630",
                "162264866509321892697680859514226512864",
                "44112934983946289584188783372973171360",
                "237794613015240435987137364743285392402",
                "74150670133171530577593446734190999365",
                "211433119228755266146148467768781269380",
                "100093353728155048853746813232193964863",
                "211172502802539424908801254263737386732",
                "263681020371490041811029594951787360573",
                "186534929346924014692690067482533622265",
                "225497483145798358330581837575840429033",
                "204905261186228131566928989077106387410",
                "147414814561993691679054115853005632314",
                "57052813950471439355133413106879261778",
                "279477250574486932768549281646736679675",
                "295635906807869655469939625270355059991",
                "119232182510113888981265489480551801805",
                "258399138769053074647669812587653128631",
                "283605823781167547076917264091633797065",
                "31727529245412136366476525410076578808",
                "313624461881345693040222890543180869520",
                "121773469683741494028201351736494508928"
            ],
            "threshold": 0.9
        },
        "source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425"
    }
]