A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 2, 2018 | Aug 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 5, 2018 | Aug 27, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-docs-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-base | Sep 18, 2018 | Aug 27, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1070-awsUpgrade linux-image-4.4.0-138-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-138-powerpc64-embUpgrade linux-image-4.4.0-1099-raspi2Upgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-138-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-4.4.0-138-genericUpgrade linux-image-4.4.0-138-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1103-snapdragonUpgrade linux-image-4.4.0-138-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1036-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-138-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatency | Oct 31, 2018 | Aug 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 27, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub