Skip to content
OpenAdvisories
Unscored DLA-1466-1 3 CVEs

linux-4.9 - security update

Published Aug 13, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 linux-4.9 4.9.110-3+deb9u2~deb8u1

Vulnerabilities 3

  • Unscored —
    CVE-2018-13405 Public exploit

    The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2018-5390 EPSS 72%

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2018-5391 Public exploit EPSS 32%

    The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

    The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu