kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfsquotaus is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
[
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "do_sched_cfs_slack_timer",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-0c92f5d2",
"digest": {
"function_hash": "239800966946814700751469942376026921999",
"length": 810.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "assign_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-0cd1cda0",
"digest": {
"function_hash": "179534685031015176513944743112908577537",
"length": 653.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__return_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-34df8f05",
"digest": {
"function_hash": "42058259032428691515012737170809819647",
"length": 482.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "do_sched_cfs_period_timer",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-63eda07b",
"digest": {
"function_hash": "86149416501804854968224083275328767701",
"length": 849.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "expire_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-64be3976",
"digest": {
"function_hash": "163693704055399239385188084000773685012",
"length": 373.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__refill_cfs_bandwidth_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-734e9609",
"digest": {
"function_hash": "33457718769176401395731918789619946114",
"length": 254.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"file": "kernel/sched/sched.h"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2019-19922-770934a1",
"digest": {
"line_hashes": [
"164020439900726997413089503317438601964",
"299895821671550763038294710807236266301",
"243236464766716382719588702644519656371",
"312128919958833136832432725889471065408",
"63007690675848655307063588359381370079",
"145837244520152073815244659085279428505",
"39670446157205841592300081430114024504",
"45786708840165355673056546703568434659",
"276785174469264113765384636007606760146",
"23373960307766957249891996911897210987"
],
"threshold": 0.9
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "distribute_cfs_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-7b6a1d6b",
"digest": {
"function_hash": "145480621377245595519067682510033127855",
"length": 627.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "start_cfs_bandwidth",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-96b462b5",
"digest": {
"function_hash": "65064330650551048077187079696228692167",
"length": 374.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__account_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-fc1f6493",
"digest": {
"function_hash": "102204258175389788035994743016541084821",
"length": 268.0
}
},
{
"source": "https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2019-19922-fed7aef8",
"digest": {
"line_hashes": [
"2014864958305326824168813638011606781",
"325938763174636540345623063851588743409",
"195888168162701757398901960279877851891",
"330003173763814961713813758598290517420",
"44364284674854891143906846501300006168",
"200186701501609920777685332499186237222",
"35784685579519276738455582003672403879",
"72232244531582713906025896023618901325",
"319644070549701921980784370632251410292",
"182902719177946940041578788193304908410",
"222503636809809072994497929482560314036",
"254960207494271763869904339263916663988",
"5187635514749928965177007333026538356",
"315842684698049548531344462933426110858",
"69496230906376048288877602095237791024",
"105101444702977348872208781823189524699",
"179610116383792301121039784987720798656",
"17299300111003695518576647325259487454",
"153087535888154445917848450057543356015",
"105787289713421173264569681930750275186",
"296013097116550376272985538190185191656",
"143554394338722658992705759796516427558",
"258280505406461053347734311601301867558",
"5194598816849638785320981192537933816",
"32199801042721774147753813516206290660",
"257438395905541261904135354750673306768",
"102165965577762319029741084691593064803",
"75871519361947128389951518407585622115",
"63836237563063313185899201654770930144",
"337996952086044111185324989532843848957",
"45966789446566986277936006235253615817",
"154351307068551297833594560784242734507",
"218225662097467388306609576012753497558",
"12128745278238429273652634063992328115",
"173432037683652575895918593789727288879",
"297251355493064874667765110018830726860",
"252004191092814767128647530510712481120",
"338573675811231348787497611699191818429",
"311090912484889145567414028650486948999",
"196479566981351274190881143162927058153",
"31375854875103818375304058524540477430",
"197416852244016791679847583935467651688",
"231081418504645040822544870686361725876",
"121116575752161842189203072628900613788",
"307549187224412120160462686183088740730",
"54778184982815782200375150758101521461",
"234788720404221947858171599124752314280",
"108095851304460928255976442441276603663",
"252266128634112638541749963237598997630",
"241964057394152725655108974556570467427",
"240033756388787813712353087683011996968",
"243118413743051822155010086915470210050",
"42634708856450237819952770132437704579",
"39673408172926597654453624570686421218",
"256698347955257242557479979863849273974",
"270333195908525057172901344851433855141",
"241934369975014282470833262711629454749",
"87559020520540027547771825140155778954",
"233242172184416737975733092975128327460",
"57753534268283992372486712858113302302",
"47684483733729049536614943115965115670",
"266132900410082317494255817820542882940",
"318601820404954146720071771137239441688",
"256723514398520139118655113217358338376",
"332479574074524830147057059769755894292",
"265141813060169462855514690625900202630",
"162264866509321892697680859514226512864",
"44112934983946289584188783372973171360",
"237794613015240435987137364743285392402",
"74150670133171530577593446734190999365",
"211433119228755266146148467768781269380",
"100093353728155048853746813232193964863",
"211172502802539424908801254263737386732",
"263681020371490041811029594951787360573",
"186534929346924014692690067482533622265",
"225497483145798358330581837575840429033",
"204905261186228131566928989077106387410",
"147414814561993691679054115853005632314",
"57052813950471439355133413106879261778",
"279477250574486932768549281646736679675",
"295635906807869655469939625270355059991",
"119232182510113888981265489480551801805",
"258399138769053074647669812587653128631",
"283605823781167547076917264091633797065",
"31727529245412136366476525410076578808",
"313624461881345693040222890543180869520",
"121773469683741494028201351736494508928"
],
"threshold": 0.9
}
}
]
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2019-19922-233a9066",
"digest": {
"line_hashes": [
"2014864958305326824168813638011606781",
"325938763174636540345623063851588743409",
"195888168162701757398901960279877851891",
"330003173763814961713813758598290517420",
"44364284674854891143906846501300006168",
"200186701501609920777685332499186237222",
"35784685579519276738455582003672403879",
"72232244531582713906025896023618901325",
"319644070549701921980784370632251410292",
"182902719177946940041578788193304908410",
"222503636809809072994497929482560314036",
"254960207494271763869904339263916663988",
"5187635514749928965177007333026538356",
"315842684698049548531344462933426110858",
"69496230906376048288877602095237791024",
"105101444702977348872208781823189524699",
"179610116383792301121039784987720798656",
"17299300111003695518576647325259487454",
"153087535888154445917848450057543356015",
"105787289713421173264569681930750275186",
"296013097116550376272985538190185191656",
"143554394338722658992705759796516427558",
"258280505406461053347734311601301867558",
"5194598816849638785320981192537933816",
"32199801042721774147753813516206290660",
"257438395905541261904135354750673306768",
"102165965577762319029741084691593064803",
"75871519361947128389951518407585622115",
"63836237563063313185899201654770930144",
"337996952086044111185324989532843848957",
"45966789446566986277936006235253615817",
"154351307068551297833594560784242734507",
"218225662097467388306609576012753497558",
"12128745278238429273652634063992328115",
"173432037683652575895918593789727288879",
"297251355493064874667765110018830726860",
"252004191092814767128647530510712481120",
"338573675811231348787497611699191818429",
"311090912484889145567414028650486948999",
"196479566981351274190881143162927058153",
"31375854875103818375304058524540477430",
"197416852244016791679847583935467651688",
"231081418504645040822544870686361725876",
"121116575752161842189203072628900613788",
"307549187224412120160462686183088740730",
"54778184982815782200375150758101521461",
"234788720404221947858171599124752314280",
"108095851304460928255976442441276603663",
"252266128634112638541749963237598997630",
"241964057394152725655108974556570467427",
"240033756388787813712353087683011996968",
"243118413743051822155010086915470210050",
"42634708856450237819952770132437704579",
"39673408172926597654453624570686421218",
"256698347955257242557479979863849273974",
"270333195908525057172901344851433855141",
"241934369975014282470833262711629454749",
"87559020520540027547771825140155778954",
"233242172184416737975733092975128327460",
"57753534268283992372486712858113302302",
"47684483733729049536614943115965115670",
"266132900410082317494255817820542882940",
"318601820404954146720071771137239441688",
"256723514398520139118655113217358338376",
"332479574074524830147057059769755894292",
"265141813060169462855514690625900202630",
"162264866509321892697680859514226512864",
"44112934983946289584188783372973171360",
"237794613015240435987137364743285392402",
"74150670133171530577593446734190999365",
"211433119228755266146148467768781269380",
"100093353728155048853746813232193964863",
"211172502802539424908801254263737386732",
"263681020371490041811029594951787360573",
"186534929346924014692690067482533622265",
"225497483145798358330581837575840429033",
"204905261186228131566928989077106387410",
"147414814561993691679054115853005632314",
"57052813950471439355133413106879261778",
"279477250574486932768549281646736679675",
"295635906807869655469939625270355059991",
"119232182510113888981265489480551801805",
"258399138769053074647669812587653128631",
"283605823781167547076917264091633797065",
"31727529245412136366476525410076578808",
"313624461881345693040222890543180869520",
"121773469683741494028201351736494508928"
],
"threshold": 0.9
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__return_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-3b7d4017",
"digest": {
"function_hash": "42058259032428691515012737170809819647",
"length": 482.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__account_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-6f80052f",
"digest": {
"function_hash": "102204258175389788035994743016541084821",
"length": 268.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "assign_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-788f533a",
"digest": {
"function_hash": "179534685031015176513944743112908577537",
"length": 653.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "expire_cfs_rq_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-7fcaddc7",
"digest": {
"function_hash": "163693704055399239385188084000773685012",
"length": 373.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"file": "kernel/sched/sched.h"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2019-19922-917bad46",
"digest": {
"line_hashes": [
"164020439900726997413089503317438601964",
"299895821671550763038294710807236266301",
"243236464766716382719588702644519656371",
"312128919958833136832432725889471065408",
"63007690675848655307063588359381370079",
"145837244520152073815244659085279428505",
"39670446157205841592300081430114024504",
"45786708840165355673056546703568434659",
"276785174469264113765384636007606760146",
"23373960307766957249891996911897210987"
],
"threshold": 0.9
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "distribute_cfs_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-a838bd2d",
"digest": {
"function_hash": "145480621377245595519067682510033127855",
"length": 627.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "do_sched_cfs_slack_timer",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-bb50e7ae",
"digest": {
"function_hash": "239800966946814700751469942376026921999",
"length": 810.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "__refill_cfs_bandwidth_runtime",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-d3f5c36c",
"digest": {
"function_hash": "33457718769176401395731918789619946114",
"length": 254.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "do_sched_cfs_period_timer",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-ed18b02a",
"digest": {
"function_hash": "86149416501804854968224083275328767701",
"length": 849.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@de53fd7aedb100f03e5d2231cfce0e4993282425",
"target": {
"function": "start_cfs_bandwidth",
"file": "kernel/sched/fair.c"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2019-19922-ed9a201c",
"digest": {
"function_hash": "65064330650551048077187079696228692167",
"length": 374.0
}
}
]