Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Zhipeng Xie

#26162de 56,330
9.8CVSS total
Vulnerabilidades · 1
PT-2018-2601
9.8
2018-04-06
Linux · Linux Kernel · CVE-2018-20784
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.20.2 **Description** The issue is related to the implementation of the `update blocked averages()` function in the Linux kernel, which can lead to an infinite loop due to an unreachable exit condition. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is caused by the mishandling of leaf cfs rq's in the kernel/sched/fair.c file, allowing attackers to induce a high load and potentially have other unspecified impacts. **Recommendations** For Linux kernel versions prior to 4.20.2, update to version 4.20.2 or later to resolve the issue. As a temporary workaround, consider restricting system load to minimize the risk of exploitation.