Description
A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash in ip_do_fragment(). With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote denial-of-service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Linux Foundation | kernel | from 4.19-rc1 to 4.19-rc3 inclusive | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | perf +14 | 4.14.0-115.el7a | RHSA-2018:2948 |
Advisories 1
- RHSA-2018:2948 Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d407b071dc369c26a38398326ee2be53651cfe4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14641
- RHSA-2018:2948 vendor-advisory
- [oss-security] 20180918 CVE-2018-14641: Linux kernel: a security flaw in the ip_frag_reasm() mailing-list