Summary
[4.14.35-1818.0.14]
- tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.14.35-1818.0.14.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.14.35-1818.0.14.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.14.35-1818.0.14.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.14.35-1818.0.14.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.14.35-1818.0.14.el7uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:4.14.35-1818.0.14.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2018-5390 EPSS 72%
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.