Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Aug 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2018 | Aug 4, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 6, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 16, 2018 | Aug 6, 2018 |
| Debian | — | Upgrade linux | Aug 7, 2018 | Aug 6, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Sep 4, 2018 | Aug 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-devel | Sep 4, 2018 | Aug 6, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.3.0.1.5.0 on Solaris 11.4 | Nov 19, 2018 | Aug 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 7, 2018 | Aug 6, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Aug 6, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 15, 2018 | Aug 6, 2018 |
| Suse | — | Upgrade kgraft-patch-3_12_61-52_146-xenUpgrade kgraft-patch-3_12_61-52_133-defaultUpgrade kgraft-patch-3_12_61-52_149-defaultUpgrade kgraft-patch-3_12_61-52_136-defaultUpgrade kernel-defaultUpgrade kgraft-patch-3_12_61-52_125-defaultUpgrade kgraft-patch-3_12_61-52_106-defaultUpgrade kgraft-patch-3_12_61-52_111-xenUpgrade kgraft-patch-3_12_61-52_101-xenUpgrade kernel-docsUpgrade dpdk-develUpgrade kgraft-patch-3_12_61-52_141-defaultUpgrade kgraft-patch-3_12_61-52_149-xenUpgrade kernel-docs-azureUpgrade kgraft-patch-3_12_61-52_122-defaultUpgrade kgraft-patch-3_12_61-52_92-xenUpgrade kernel-ec2Upgrade dpdk-thunderx-develUpgrade kgraft-patch-3_12_61-52_136-xenUpgrade kgraft-patch-3_12_61-52_128-xenUpgrade kernel-azure-baseUpgrade kgraft-patch-3_12_61-52_106-xenUpgrade kgraft-patch-3_12_61-52_119-xenUpgrade kgraft-patch-3_12_61-52_119-defaultUpgrade kgraft-patch-3_12_61-52_133-xenUpgrade kgraft-patch-3_12_61-52_92-defaultUpgrade kgraft-patch-3_12_61-52_128-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_61-52_141-xenUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-source-azureUpgrade kgraft-patch-3_12_61-52_111-defaultUpgrade kernel-default-extraUpgrade kernel-ec2-extraUpgrade kgraft-patch-3_12_61-52_146-defaultUpgrade kgraft-patch-3_12_61-52_125-xenUpgrade kernel-devel-azureUpgrade kgraft-patch-3_12_61-52_122-xenUpgrade kgraft-patch-3_12_61-52_101-default | Aug 8, 2018 | Aug 6, 2018 |
| Ubuntu | — | Upgrade linux-image-highbankUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-135-omapUpgrade linux-image-omapUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.2.0-135-powerpc64-smpUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-1015-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-3.2.0-135-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-3.2.0-135-virtualUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-4.15.0-30-snapdragonUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-3.2.0-135-highbankUpgrade linux-image-4.15.0-1018-raspi2Upgrade linux-image-genericUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-1013-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-azure-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-4.15.0-1017-awsUpgrade linux-image-4.15.0-1019-azureUpgrade linux-image-3.2.0-135-generic-paeUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-30-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-30-lowlatencyUpgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1017-kvmUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-135-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-30-generic | Aug 15, 2018 | Aug 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub