Skip to content
OpenAdvisories
Unscored USN-3732-1 1 CVE

linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerability

Published Aug 6, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Juha-Matti Tilli discovered that the TCP implementation in the Linux kernel
performed algorithmically expensive operations in some situations when
handling incoming packets. A remote attacker could use this to cause a
denial of service.

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux 4.15.0-30.32
Ubuntu · 18.04 LTS 18.04:LTS linux-aws 4.15.0-1017.17
Ubuntu · 18.04 LTS 18.04:LTS linux-azure 4.15.0-1019.19
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp 4.15.0-1015.15
Ubuntu · 18.04 LTS 18.04:LTS linux-kvm 4.15.0-1017.17
Ubuntu · 18.04 LTS 18.04:LTS linux-oem 4.15.0-1013.16
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2 4.15.0-1018.19

Vulnerabilities 1

  • Unscored —
    CVE-2018-5390 EPSS 72%

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-5390