The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-devel | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Arista Eos | — | Upgrade to a remediated version of EOS | Sep 4, 2024 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 11, 2018 | Aug 14, 2018 |
| Cisco Ios | — | Upgrade to the latest version of Cisco IOS to resolve this vulnerability | Oct 11, 2018 | Sep 6, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade linux | Aug 16, 2018 | Aug 14, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headers | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo | Mar 11, 2019 | Sep 6, 2018 |
| Msft | — | 2018-09 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 for Itanium-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4457140) | Sep 11, 2018 | Sep 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2018 | Aug 14, 2018 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your device | Sep 20, 2018 | Aug 14, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Sep 6, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 26, 2018 | Sep 6, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-docs-azureUpgrade kernel-default-extraUpgrade kernel-default-man | Aug 17, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-155-genericUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1021-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-32-genericUpgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-oemUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-genericUpgrade linux-image-4.15.0-1019-awsUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure | Aug 18, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub