CVE-2019-19922
lowpriority · track · 22EPSS 0.009 · 61 %ileEURUUSEPSS · scored 2026-10-27
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (21)
Products and version ranges known to be affected.
- netapp active iq unified managerall versionsnvdUScpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:*:*:*
- netapp aff baseboard management controller= a700nvdUScpe:2.3:h:netapp:aff_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp data availability servicesall versionsnvdUScpe:2.3:a:netapp:data_availability_services:*:*:*:*:*:*:*:*
- netapp e-series santricity os controller11.0 → 11.70.2nvdUScpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
- netapp fas/aff baseboard management controllerall versionsnvdUScpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp hci baseboard management controller= h610snvdUScpe:2.3:a:netapp:hci_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp solidfire & hci management nodeall versionsnvdUScpe:2.3:a:netapp:solidfire_\&_hci_management_node:*:*:*:*:*:*:*:*
- netapp solidfire baseboard management controllerall versionsnvdUScpe:2.3:h:netapp:solidfire_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp steelstore cloud integrated storageall versionsnvdUScpe:2.3:a:netapp:steelstore_cloud_integrated_storage:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (36)
External citations — patches, advisories, analysis.
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9cnnvd
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de53fd7aedb100f03e5d2231cfce0e4993282425cnnvd
- https://github.com/kubernetes/kubernetes/issues/67577cnnvd
- https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425cnnvd
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-19922cnnvd
- https://packetstormsecurity.com/files/155854/Ubuntu-Security-Notice-USN-4226-1.htmlcnnvd
- https://packetstormsecurity.com/files/157260/Red-Hat-Security-Advisory-2020-1493-01.htmlcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan