The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Arista Eos | — | Upgrade to a remediated version of EOS | Sep 4, 2024 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 11, 2018 | Aug 14, 2018 |
| Cisco Ios | — | Upgrade to the latest version of Cisco IOS to resolve this vulnerability | Oct 11, 2018 | Sep 6, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade linux | Aug 16, 2018 | Aug 14, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libs | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 11, 2019 | Sep 6, 2018 |
| Msft | — | 2018-09 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Server 2008 for Itanium-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4457145) | Sep 11, 2018 | Sep 11, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2018 | Aug 14, 2018 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Sep 20, 2018 | Aug 14, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Sep 6, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 26, 2018 | Sep 6, 2018 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-docs-azureUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-source-azure | Aug 17, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-32-genericUpgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-4.15.0-1019-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1021-azureUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-4.4.0-133-powerpc64-emb | Aug 18, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub