Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Jun 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2019 | Jun 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 18, 2019 |
| Arista Eos | — | Upgrade to a remediated software version | Sep 4, 2024 | Jun 26, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 19, 2019 | Jun 17, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | Jun 18, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jul 2, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Jul 26, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 18, 2019 | Jun 17, 2019 |
| Panos | — | Update PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your device | Jun 28, 2019 | Jun 17, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R5Update Pulse Connect Secure to version 9.0R5Update Pulse Connect Secure to version 9.1R3 | Oct 28, 2020 | Jun 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 18, 2019 | Jun 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Jun 18, 2019 | Jun 17, 2019 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.0.0-17-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1048-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-17-lowlatencyUpgrade linux-image-4.15.0-1041-awsUpgrade linux-image-4.4.0-151-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-22-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1008-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-1016-raspi2Upgrade linux-image-4.18.0-1013-gcpUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-3.13.0-171-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1047-azureUpgrade linux-image-4.4.0-1046-awsUpgrade linux-image-4.18.0-1020-azureUpgrade linux-image-3.2.0-141-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-22-lowlatencyUpgrade linux-image-5.0.0-1014-snapdragonUpgrade linux-image-4.15.0-1015-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-52-lowlatencyUpgrade linux-image-4.4.0-1115-snapdragonUpgrade linux-image-4.4.0-151-lowlatencyUpgrade linux-image-4.15.0-1036-kvmUpgrade linux-image-4.4.0-151-powerpc-e500mcUpgrade linux-image-4.4.0-1111-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.18.0-1014-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1008-awsUpgrade linux-image-gcpUpgrade linux-image-4.18.0-22-generic-lpaeUpgrade linux-image-5.0.0-1008-kvmUpgrade linux-image-4.15.0-52-genericUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1038-raspi2Upgrade linux-image-azureUpgrade linux-image-5.0.0-1010-raspi2Upgrade linux-image-5.0.0-17-generic-lpaeUpgrade linux-image-4.4.0-151-genericUpgrade linux-image-4.4.0-151-powerpc-smpUpgrade linux-image-4.15.0-1034-gcpUpgrade linux-image-3.13.0-171-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-22-genericUpgrade linux-image-4.4.0-151-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-171-lowlatencyUpgrade linux-image-4.15.0-1055-snapdragonUpgrade linux-image-4.15.0-52-generic-lpaeUpgrade linux-image-4.4.0-151-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1043-oemUpgrade linux-image-awsUpgrade linux-image-4.18.0-1018-awsUpgrade linux-image-virtual-hwe-16.04 | Jun 18, 2019 | Jun 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub