Skip to content
OpenAdvisories
Unscored DSA-4266-1 2 CVEs

linux - security update

Published Aug 6, 2018 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 linux 4.9.110-3+deb9u1

Vulnerabilities 2

  • Unscored —
    CVE-2018-13405 Public exploit

    The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…

  • Unscored —
    CVE-2018-5390 EPSS 72%

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.