Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headers | Apr 27, 2020 | Jun 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2019 | Jun 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 18, 2019 |
| Arista Eos | — | Upgrade to a remediated software version | Sep 4, 2024 | Jun 26, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 19, 2019 | Jun 17, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | Jun 18, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 2, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel | Jul 26, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 18, 2019 | Jun 17, 2019 |
| Panos | — | Update PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Jun 28, 2019 | Jun 17, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R3Update Pulse Connect Secure to version 9.1R5Update Pulse Connect Secure to version 9.0R5 | Oct 28, 2020 | Jun 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 18, 2019 | Jun 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Jun 18, 2019 | Jun 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-54-generic-lpaeUpgrade linux-image-4.15.0-1045-oemUpgrade linux-image-4.18.0-25-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.18.0-1020-awsUpgrade linux-image-4.15.0-1043-awsUpgrade linux-image-5.0.0-1016-snapdragonUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1038-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.0.0-20-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1114-raspi2Upgrade linux-image-4.15.0-54-lowlatencyUpgrade linux-image-4.4.0-154-generic-lpaeUpgrade linux-image-4.4.0-1048-awsUpgrade linux-image-4.15.0-1040-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.18.0-25-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.0.0-1010-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-154-powerpc-e500mcUpgrade linux-image-5.0.0-1010-kvmUpgrade linux-image-4.18.0-25-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-154-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1010-azureUpgrade linux-image-4.4.0-154-genericUpgrade linux-image-4.4.0-1118-snapdragonUpgrade linux-image-4.4.0-154-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1010-gcpUpgrade linux-image-4.4.0-1051-kvmUpgrade linux-image-5.0.0-20-generic-lpaeUpgrade linux-image-5.0.0-1012-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.18.0-1016-kvmUpgrade linux-image-4.4.0-154-powerpc64-embUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1087-awsUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1049-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-1023-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1017-oracleUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1036-gkeUpgrade linux-image-4.15.0-54-genericUpgrade linux-image-4.15.0-1036-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-154-lowlatencyUpgrade linux-image-5.0.0-20-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.18.0-1018-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-25-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1057-snapdragonUpgrade linux-image-4.18.0-1015-gcp | Jun 29, 2019 | Jun 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub