Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Jun 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2019 | Jun 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 18, 2019 |
| Arista Eos | — | Upgrade to a remediated software version | Sep 4, 2024 | Jun 26, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 19, 2019 | Jun 17, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | Jun 18, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headers | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Jul 2, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf | Jul 26, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 18, 2019 | Jun 17, 2019 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your device | Jun 28, 2019 | Jun 17, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R5Update Pulse Connect Secure to version 9.0R5Update Pulse Connect Secure to version 9.1R3 | Oct 28, 2020 | Jun 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 18, 2019 | Jun 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Jun 18, 2019 | Jun 17, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lts-trustyUpgrade linux-image-5.0.0-1008-gcpUpgrade linux-image-4.18.0-1013-gcpUpgrade linux-image-oracleUpgrade linux-image-4.15.0-52-lowlatencyUpgrade linux-image-4.18.0-1020-azureUpgrade linux-image-5.0.0-1014-snapdragonUpgrade linux-image-5.0.0-17-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-151-powerpc64-embUpgrade linux-image-4.18.0-22-snapdragonUpgrade linux-image-4.18.0-1016-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1041-awsUpgrade linux-image-4.15.0-1036-kvmUpgrade linux-image-genericUpgrade linux-image-3.2.0-141-genericUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-3.13.0-171-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1046-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-151-lowlatencyUpgrade linux-image-4.18.0-22-lowlatencyUpgrade linux-image-4.4.0-1048-kvmUpgrade linux-image-5.0.0-17-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1015-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1115-snapdragonUpgrade linux-image-4.15.0-1047-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-1018-awsUpgrade linux-image-4.4.0-151-powerpc-e500mcUpgrade linux-image-4.4.0-151-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1038-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1043-oemUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1055-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1008-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-52-generic-lpaeUpgrade linux-image-4.4.0-151-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1008-kvmUpgrade linux-image-4.15.0-1034-gcpUpgrade linux-image-4.4.0-151-powerpc-smpUpgrade linux-image-5.0.0-17-generic-lpaeUpgrade linux-image-4.18.0-22-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.18.0-1014-kvmUpgrade linux-image-awsUpgrade linux-image-4.18.0-22-generic-lpaeUpgrade linux-image-5.0.0-1010-raspi2Upgrade linux-image-4.4.0-1111-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-171-generic-lpaeUpgrade linux-image-4.4.0-151-genericUpgrade linux-image-azureUpgrade linux-image-4.15.0-52-genericUpgrade linux-image-3.13.0-171-lowlatencyUpgrade linux-image-generic-lpae | Jun 18, 2019 | Jun 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub