Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Jun 19, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 18, 2019 | Jun 13, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 18, 2019 |
| Arista Eos | — | Upgrade to a remediated software version | Sep 4, 2024 | Jun 26, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 19, 2019 | Jun 17, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | Jun 18, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 27, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jul 2, 2019 | Jun 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf | Jul 26, 2019 | Jun 19, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 18, 2019 | Jun 17, 2019 |
| Panos | — | Update PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Jun 28, 2019 | Jun 17, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R3Update Pulse Connect Secure to version 9.0R5Update Pulse Connect Secure to version 9.1R5 | Oct 28, 2020 | Jun 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 18, 2019 | Jun 17, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Jun 18, 2019 | Jun 17, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-54-lowlatencyUpgrade linux-image-4.4.0-1048-awsUpgrade linux-image-4.4.0-1114-raspi2Upgrade linux-image-4.15.0-1045-oemUpgrade linux-image-4.18.0-25-genericUpgrade linux-image-5.0.0-1010-awsUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-154-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1010-azureUpgrade linux-image-5.0.0-20-genericUpgrade linux-image-4.15.0-1043-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1038-kvmUpgrade linux-image-4.15.0-54-generic-lpaeUpgrade linux-image-4.18.0-1020-awsUpgrade linux-image-4.4.0-154-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1040-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1010-kvmUpgrade linux-image-4.4.0-154-powerpc-e500mcUpgrade linux-image-4.18.0-25-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.18.0-25-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1016-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1017-oracleUpgrade linux-image-4.18.0-25-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-4.18.0-1015-gcpUpgrade linux-image-oracleUpgrade linux-image-5.0.0-20-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.18.0-1018-raspi2Upgrade linux-image-4.15.0-1057-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1036-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1010-gcpUpgrade linux-image-4.4.0-154-powerpc-smpUpgrade linux-image-4.4.0-154-genericUpgrade linux-image-4.18.0-1023-azureUpgrade linux-image-4.4.0-154-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-20-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1036-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.0.0-1012-raspi2Upgrade linux-image-4.4.0-154-powerpc64-embUpgrade linux-image-4.15.0-1049-azureUpgrade linux-image-4.18.0-1016-kvmUpgrade linux-image-4.15.0-54-genericUpgrade linux-image-4.4.0-1051-kvmUpgrade linux-image-4.4.0-1118-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04 | Jun 29, 2019 | Jun 17, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub