Skip to content
OpenAdvisories
High ELSA-2018-4190 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Aug 7, 2018 · Updated Aug 7, 2018

Ecosystem: Oracle Linux

Summary

[4.14.35-1818.0.15]
- tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}
- tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet) [Orabug: 28453849] {CVE-2018-5390}

Fixed packages 10

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 perf 0:4.14.35-1818.0.15.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-1818.0.15.el7uek

Vulnerabilities 1

  • Unscored —
    CVE-2018-5390 EPSS 72%

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu