In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfsrq's, which allows attackers to cause a denial of service (infinite loop in updateblocked_averages) or possibly have unspecified other impact by inducing a high load.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20784.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c40f7d74c741a907cfaeb73a7697081881c497d0",
"digest": {
"function_hash": "35871255141980260215168777851374862268",
"length": 256.0
},
"id": "CVE-2018-20784-27c15afa",
"deprecated": false,
"target": {
"file": "kernel/sched/fair.c",
"function": "cfs_rq_is_decayed"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c40f7d74c741a907cfaeb73a7697081881c497d0",
"digest": {
"function_hash": "294500195159327480036747023912536902942",
"length": 928.0
},
"id": "CVE-2018-20784-ac9c45c1",
"deprecated": false,
"target": {
"file": "kernel/sched/fair.c",
"function": "update_blocked_averages"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c40f7d74c741a907cfaeb73a7697081881c497d0",
"digest": {
"line_hashes": [
"120687343190881771477364500223812810456",
"135829591413428073867527243315223365133",
"297074410741166150634618034437181093525",
"25282932274851458812307835100187983535",
"300906761950626963585042244415901432217",
"83780010720664015896913747076649400259",
"168624523570466643754932550731463911094",
"230626085834772716150102733884240512114",
"228119816314804615625955030059199069952",
"217979329144284659352856462909667764829",
"13908632632091626825029356320884728745",
"284453713555697009674303565663951459793",
"223223530618610371634373550937657694436",
"197952604440571639294777338927355245532",
"93300535345628596946480619200328195855",
"260521615139692690451496672308413875705",
"64401736213688367414844963467525853789",
"307764300138237263838410951882575187013",
"267991572090851374279102217641673008546",
"272261896437551911119071184700962617803",
"257667071892005401240867169212949933565",
"88001014060214388114822720017756941815",
"272763613754865799329887240812614831175",
"229422668764313196671329793192524127121",
"44867509282802506252269034686122302532",
"294237391589631003552003350199484869809",
"274653489023018072516192899385311109329",
"306791349332970073300818556718213004506",
"54630079870958579786727676276781685021",
"148769412639501521838168850183472013160",
"318580901243219832274849344904714084371",
"192112581964018703624823047762365310321",
"310210043221387616056163755006214382817",
"261290726092558237359946640837440486079",
"177440847581321379598870848019077630470",
"200956655557914663017856528446401222145",
"48913351491677596601606354407949173168",
"112084153670365599967421523635883665356",
"94972386157472977597340301007160391114",
"121897620616005880903742570922018683791",
"89456861508052287908865138329860697776",
"297489991296947304484818942216737091034",
"126858623453991439895285718039237543398"
],
"threshold": 0.9
},
"id": "CVE-2018-20784-e9322df5",
"deprecated": false,
"target": {
"file": "kernel/sched/fair.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/c40f7d74c741a907cfaeb73a7697081881c497d0",
"digest": {
"function_hash": "181005488638498937681802369072987307918",
"length": 196.0
},
"id": "CVE-2018-20784-f045efac",
"deprecated": false,
"target": {
"file": "kernel/sched/fair.c",
"function": "print_cfs_stats"
}
}
]