CVE-2019-19922

CVE-2019-19922 is a denial-of-service vulnerability in the Linux kernel (prior to version 5.3.9), specifically affecting the kernel/sched/fair.c component when cpu.cfs_quota_us is utilized, such as in Kubernetes environments. Attackers can exploit this by generating specific workloads that trigger unwanted slice expiration, leading to performance degradation for non-CPU-bound applications. Rated Medium (CVSS 5.5), this vulnerability requires local access and low privileges, with the impact being high availability loss for affected applications, though it does not crash the kernel. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, and it is not on the CISA KEV catalog.