Skip to content
OpenAdvisories
Unscored CVE-2018-5390 EUVD-2018-17160GHSA-grv8-gqh3-fmc9

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

Published Aug 6, 2018 · Updated Aug 5, 2024 · Assigned by certcc

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Affected products

VendorProductAffectedFixed
Linux Linux Kernel 4.9 – < 4.9* 4.9*

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 4.17.14-1 —
Debian 13 linux 4.17.14-1 —
Debian 12 linux 4.17.14-1 —
Debian 9 linux 4.9.110-3+deb9u1 DSA-4266-1
Debian 8 linux-4.9 4.9.110-3+deb9u2~deb8u1 DLA-1466-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS linux 4.15.0-30.32 USN-3732-1
Ubuntu 18.04 LTS linux-aws +1 4.15.0-1017.17 USN-3732-1
Ubuntu 18.04 LTS linux-azure 4.15.0-1019.19 USN-3732-1
Ubuntu 18.04 LTS linux-gcp 4.15.0-1015.15 USN-3732-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1013.16 USN-3732-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1018.19 USN-3732-1
Ubuntu 16.04 LTS linux 4.4.0-133.159 USN-3741-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1065.75 USN-3741-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1019.19~16.04.1 USN-3732-2
Ubuntu 16.04 LTS linux-euclid 4.4.0-9029.31 —
Ubuntu 16.04 LTS linux-gcp 4.15.0-1015.15~16.04.1 USN-3732-2
Ubuntu 16.04 LTS linux-hwe 4.15.0-30.32~16.04.1 USN-3732-2
Ubuntu 16.04 LTS linux-kvm 4.4.0-1031.37 USN-3741-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1094.102 USN-3741-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1098.103 USN-3741-1
Ubuntu 14.04 LTS linux 3.13.0-155.205 USN-3742-1
Ubuntu 14.04 LTS linux-aws 4.4.0-1027.30 USN-3741-2
Ubuntu 14.04 LTS linux-lts-xenial 4.4.0-133.159~14.04.1 USN-3741-2
ReleasePackageFixed inAdvisory
RHEL 7 kernel-alt 4.14.0-115.el7a RHSA-2018:2948
RHEL 7 kernel-rt +10 3.10.0-862.11.6.rt56.819.el7 RHSA-2018:2395
RHEL 7 perf +18 3.10.0-862.11.6.el7 RHSA-2018:2948, RHSA-2018:2384
RHEL 7 redhat-release-virtualization-host +1 4.2-5.2.el7 RHSA-2018:2403
RHEL 7 redhat-virtualization-host +1 4.2-20180813.0.el7_5 RHSA-2018:2403
RHEL 7 rhvm-appliance 2:4.2-20180813.0.el7 RHSA-2018:2402
RHEL 6 perf +16 2.6.32-754.3.5.el6 RHSA-2018:2390
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7.4 EUS perf +18 3.10.0-693.39.1.el7 RHSA-2018:2776
RHEL 7.3 EUS perf +18 3.10.0-514.58.1.el7 RHSA-2018:2785
RHEL 7.2 TUS perf +12 3.10.0-327.73.1.el7 RHSA-2018:2790
RHEL 7.2 E4S perf +12 3.10.0-327.73.1.el7 RHSA-2018:2790
RHEL 7.2 AUS perf +12 3.10.0-327.73.1.el7 RHSA-2018:2790
RHEL 6.7 EUS perf +16 2.6.32-573.62.1.el6 RHSA-2018:2645
RHEL 6.6 TUS perf +10 2.6.32-504.76.2.el6 RHSA-2018:2924
RHEL 6.6 AUS perf +10 2.6.32-504.76.2.el6 RHSA-2018:2924
RHEL 6.5 AUS perf +10 2.6.32-431.93.2.el6 RHSA-2018:2933
RHEL 6.4 AUS perf +9 2.6.32-358.93.1.el6 RHSA-2018:2791
Red Hat MRG 2 kernel-rt +10 1:3.10.0-693.39.1.rt56.629.el6rt RHSA-2018:2789
ReleasePackageFixed inAdvisory
SLES 15 kernel-azure +2 4.12.14-5.8.1 SUSE-SU-2018:2222-1
SLES 15 kernel-docs +6 4.12.14-25.6.1 SUSE-SU-2018:2223-1
SLES 12 SP3 dpdk +1 16.11.6-8.7.2 SUSE-SU-2018:2328-1
SLES 12 SP3 kernel-azure +2 4.4.143-4.13.1 SUSE-SU-2018:2374-1
SLES 12 SP3 kernel-docs +4 4.4.143-94.47.1 SUSE-SU-2018:2328-1
SLES 12 SP3 lttng-modules 2.7.1-8.4.2 SUSE-SU-2018:2328-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_13 12-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 10-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 9-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 7-2.1 SUSE-SU-2018:2860-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_20 6-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 5-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_23 3-2.1 SUSE-SU-2018:2864-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2864-1, SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_25 +6 2-2.1 SUSE-SU-2019:2601-1, SUSE-SU-2019:2230-1, SUSE-SU-2019:1767-1
SLES 12 SP2 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-2, SUSE-SU-2018:2344-1
SLES 12 SP1 kernel-xen +3 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_21 11-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_22 9-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_23 8-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 7-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_27 5-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 4-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_30 3-2.1 SUSE-SU-2018:2960-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_31 +3 2-2.1 SUSE-SU-2019:2821-1, SUSE-SU-2019:1767-1, SUSE-SU-2019:1425-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_35 1-2.3.1 SUSE-SU-2019:1870-1
SLES 12 kernel-ec2 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES 12 kgraft-patch-SLE12_Update_27 11-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_28 +1 9-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_30 +2 8-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_33 7-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_34 5-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_35 +1 4-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_37 3-2.1 SUSE-SU-2018:2787-1
SLES 12 kgraft-patch-SLE12_Update_38 +1 2-2.1 SUSE-SU-2019:1425-1, SUSE-SU-2018:3265-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.98.1 SUSE-SU-2019:14127-1
SLES for SAP 12 SP3 dpdk +1 16.11.6-8.7.2 SUSE-SU-2018:2328-1
SLES for SAP 12 SP3 kernel-azure +1 4.4.143-4.13.1 SUSE-SU-2018:2374-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.143-94.47.1 SUSE-SU-2018:2328-1
SLES for SAP 12 SP3 lttng-modules 2.7.1-8.4.2 SUSE-SU-2018:2328-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_13 12-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_14 +1 10-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_16 +1 9-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_18 +1 7-2.1 SUSE-SU-2018:2860-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_20 6-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_21 +1 5-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_23 3-2.1 SUSE-SU-2018:2864-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2864-1, SUSE-SU-2018:2344-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_25 +6 2-2.1 SUSE-SU-2019:2601-1, SUSE-SU-2019:2230-1, SUSE-SU-2019:1767-1
SLES for SAP 12 SP2 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1
SLES for SAP 12 SP1 kernel-xen +3 3.12.74-60.64.118.1 SUSE-SU-2019:1870-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_21 11-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_22 9-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_23 8-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_24 +2 7-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_27 5-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_28 +1 4-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_30 3-2.1 SUSE-SU-2018:2960-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_33 +1 2-2.1 SUSE-SU-2019:2821-1, SUSE-SU-2019:1767-1, SUSE-SU-2019:1425-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_35 1-2.3.1 SUSE-SU-2019:1870-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.147-3.20.1 SUSE-SU-2018:2596-1
SLE Live Patching 15 kernel-default 4.12.14-25.6.1 SUSE-SU-2018:2223-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_0 2-4.1 SUSE-SU-2018:2474-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_1 2-2.1 SUSE-SU-2018:2472-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_2 1-1.3.1 SUSE-SU-2018:2223-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_10 +1 6-2.1 SUSE-SU-2018:2961-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_12 +1 4-2.1 SUSE-SU-2018:2961-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_14 +1 3-2.1 SUSE-SU-2018:2963-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_16 1-4.5.1 SUSE-SU-2018:2961-1, SUSE-SU-2018:2328-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_2 +1 11-2.1 SUSE-SU-2018:3029-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_4 10-2.1 SUSE-SU-2018:2962-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_5 +2 9-2.1 SUSE-SU-2018:2962-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_8 +1 7-2.1 SUSE-SU-2018:2962-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-1
SUSE OpenStack Cloud 7 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.92.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_24 1-3.7.1 SUSE-SU-2018:2344-1
SUSE Enterprise Storage 4 lttng-modules 2.7.1-9.4.1 SUSE-SU-2018:2344-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 perf +7 4.14.59-68.43.amzn2 ALAS2-2018-1050

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 kernel-uek +5 4.1.12-124.19.2.el7uek ELSA-2018-4216, ELSA-2018-4190, ELSA-2018-4189
Oracle Linux 7 kernel-uek-headers +2 4.14.35-1818.0.15.el7uek ELSA-2018-4190
Oracle Linux 7 kernel-uek-tools 4.14.35-1818.0.14.el7uek ELSA-2018-4190, ELSA-2018-4189
Oracle Linux 7 perf +11 3.10.0-862.11.6.el7 ELSA-2018-4190, ELSA-2018-2384

Advisories 50

References