Description
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | Kernel 5.3 rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.4.6-1 | — |
| Debian 13 | linux | 5.4.6-1 | — |
| Debian 12 | linux | 5.4.6-1 | — |
| Debian 10 | linux | 4.19.232-1 | DSA-5096-1 |
| Debian 9 | linux | 4.9.290-1 | DLA-2843-1 |
| Debian 9 | linux-4.19 | 4.19.232-1~deb9u1 | DLA-2941-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv +6 | No fix yet | — |
| Ubuntu 18.04 LTS | linux | 4.15.0-166.174 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-aws | 4.15.0-1118.125 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-azure-4.15 | 4.15.0-1129.142 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-dell300x | 4.15.0-1033.38 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp-4.15 | 4.15.0-1114.128 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-kvm | 4.15.0-1105.107 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-oracle | 4.15.0-1085.93 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-raspi2 | 4.15.0-1101.108 | USN-5209-1 |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1118.127 | USN-5209-1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2059.61 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2041.45 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1075.84 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2024.26 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1072.78 | — |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1114.123~20.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-222.255 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1138.152 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1118.125~16.04.1 | USN-5209-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1129.142~16.04.1 | USN-5209-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1114.128~16.04.1 | USN-5209-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-166.174~16.04.1 | USN-5209-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1103.112 | USN-5343-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1085.93~16.04.1 | USN-5209-1 |
| Ubuntu Pro 14.04 LTS | linux | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1102.107 | USN-5343-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1129.142~14.04.1 | USN-5209-1 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-222.255~14.04.1 | USN-5343-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | kernel-rt +12 | 4.18.0-348.2.1.rt7.132.el8_5 | RHSA-2021:4646 |
| RHEL 8 | perf +26 | 4.18.0-348.2.1.el8_5 | RHSA-2021:4647 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.4 EUS | kernel-rt +12 | 4.18.0-305.28.1.rt7.100.el8_4 | RHSA-2021:4648 |
| RHEL 8.4 EUS | perf +26 | 4.18.0-305.28.1.el8_4 | RHSA-2021:4650 |
| RHEL 8.2 EUS | kernel-rt +12 | 4.18.0-193.70.1.rt13.120.el8_2 | RHSA-2021:4875 |
| RHEL 8.2 EUS | perf +26 | 4.18.0-193.70.1.el8_2 | RHSA-2021:4871 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | kernel-tools-libs-devel | 4.18.0-348.2.1.el8_5 | ALSA-2021:4647 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kernel | 4.18.0-348.2.1.el8_5 | RLSA-2021:4647 |
| Rocky Linux 8 | kernel-rt | 4.18.0-348.2.1.rt7.132.el8_5 | RLSA-2021:4646 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | kernel-livepatch-4.14.252-195.481 | 1.0-0.amzn2 | ALAS2-2021-1719 |
| Amazon Linux 2 | perf +8 | 4.14.252-195.481.amzn2 | ALAS2-2021-1719 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | perf +19 | 4.18.0-348.2.1.el8_5 | ELSA-2021-4647 |
| Oracle Linux 7 | kernel-uek-container | 4.14.35-2047.512.6.el7 | ELSA-2022-9314 |
| Oracle Linux 7 | perf +10 | 4.14.35-2047.512.6.el7uek | ELSA-2022-9313 |
Advisories 21
- ALSA-2021:4647 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-5209-1 linux, linux-aws, linux-aws-hwe, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Sep 9, 2026
- RHSA-2021:4871 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2021:4875 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- USN-5343-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- RHSA-2021:4650 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:4647 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:4648 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:4646 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-5096-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2843-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2941-1 linux-4.19 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2021:4647 Important: kernel security update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2021:4646 Important: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- ALAS2-2021-1719 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 19, 2025
- WID-SEC-2023-2457 Linux Kernel: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 27, 2023
- ICSA-22-167-09 Siemens SCALANCE LPE9403 Third-Party Vulnerabilities CISA ICS & IT advisories · Jun 14, 2022
- SSA-222547 SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0 Siemens ProductCERT · Jun 14, 2022
- ELSA-2022-9314 Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 25, 2022
- ELSA-2022-9313 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 25, 2022
- ELSA-2021-4647 Important: kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 18, 2021
References
- https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=511885d7061eda3eb1faf3f57dcc936ff75863f1
- https://bugzilla.redhat.com/show_bug.cgi?id=2005258
- [debian-lts-announce] 20211216 [SECURITY] [DLA 2843-1] linux security update mailing-list
- [debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update mailing-list
- DSA-5096 vendor-advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf