A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 5, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-docs-azureUpgrade kernel-default | Sep 18, 2018 | Aug 27, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenial | Oct 31, 2018 | Aug 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub