Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Aug 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 7, 2018 | Aug 4, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 6, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 16, 2018 | Aug 6, 2018 |
| Debian | — | Upgrade linux | Aug 7, 2018 | Aug 6, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 6, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade perf | Sep 4, 2018 | Aug 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Sep 4, 2018 | Aug 6, 2018 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.3.0.1.5.0 on Solaris 11.4 | Nov 19, 2018 | Aug 6, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 7, 2018 | Aug 6, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Aug 6, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 15, 2018 | Aug 6, 2018 |
| Suse | — | Upgrade kgraft-patch-3_12_61-52_146-defaultUpgrade kernel-ec2-develUpgrade kgraft-patch-3_12_61-52_101-defaultUpgrade kernel-azure-baseUpgrade kgraft-patch-3_12_61-52_106-xenUpgrade kgraft-patch-3_12_61-52_128-xenUpgrade kernel-default-manUpgrade dpdk-thunderx-develUpgrade kgraft-patch-3_12_61-52_119-defaultUpgrade kgraft-patch-3_12_61-52_125-xenUpgrade kgraft-patch-3_12_61-52_111-defaultUpgrade kgraft-patch-3_12_61-52_141-xenUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_61-52_133-xenUpgrade kgraft-patch-3_12_61-52_136-xenUpgrade kernel-devel-azureUpgrade kgraft-patch-3_12_61-52_122-xenUpgrade kgraft-patch-3_12_61-52_128-defaultUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2-extraUpgrade kgraft-patch-3_12_61-52_92-defaultUpgrade kgraft-patch-3_12_61-52_119-xenUpgrade kernel-docsUpgrade dpdk-develUpgrade kernel-defaultUpgrade kgraft-patch-3_12_61-52_122-defaultUpgrade kgraft-patch-3_12_61-52_106-defaultUpgrade kgraft-patch-3_12_61-52_136-defaultUpgrade kgraft-patch-3_12_61-52_125-defaultUpgrade kernel-docs-azureUpgrade kgraft-patch-3_12_61-52_92-xenUpgrade kernel-ec2Upgrade kgraft-patch-3_12_61-52_111-xenUpgrade kgraft-patch-3_12_61-52_149-defaultUpgrade kgraft-patch-3_12_61-52_101-xenUpgrade kgraft-patch-3_12_61-52_146-xenUpgrade kgraft-patch-3_12_61-52_149-xenUpgrade kgraft-patch-3_12_61-52_141-defaultUpgrade kgraft-patch-3_12_61-52_133-default | Aug 8, 2018 | Aug 6, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-highbankUpgrade linux-image-omapUpgrade linux-image-4.15.0-1015-gcpUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-3.2.0-135-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-3.2.0-135-virtualUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-3.2.0-135-omapUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.2.0-135-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-genericUpgrade linux-image-4.15.0-1018-raspi2Upgrade linux-image-4.4.0-1065-awsUpgrade linux-image-4.15.0-1017-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1019-azureUpgrade linux-image-3.2.0-135-powerpc-smpUpgrade linux-image-3.2.0-135-generic-paeUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-30-snapdragonUpgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-30-generic-lpaeUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-3.2.0-135-highbankUpgrade linux-image-4.15.0-1013-oemUpgrade linux-image-azure-edgeUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-4.15.0-30-genericUpgrade linux-image-4.15.0-1017-awsUpgrade linux-image-4.15.0-30-lowlatency | Aug 15, 2018 | Aug 6, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub