{"id":"CVE-2018-5390","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5390","generatedAt":"2026-10-29T02:05:05.803Z","title":"Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.","description":"Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.","published":"2018-08-06T20:29:02.000Z","lastModified":"2026-06-17T02:00:15.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-400"],"affected":["redhat/virtualization","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","linux/linux kernel","canonical/ubuntu linux","debian/debian linux","hp/aruba airwave amp","hp/aruba clearpass policy manager","f5/big-ip access policy manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip application acceleration manager","f5/big-ip application security manager","f5/big-ip domain name system","f5/big-ip edge gateway","f5/big-ip fraud protection service","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip local traffic manager","f5/big-ip policy enforcement manager","f5/big-ip webaccelerator","f5/traffix systems signaling delivery controller","a10networks/advanced core operating system","cisco/collaboration meeting rooms","cisco/digital network architecture center","cisco/expressway","cisco/expressway series","cisco/meeting management","cisco/network assurance engine","cisco/threat grid-cloud","cisco/webex hybrid data security","cisco/webex video mesh","cisco/telepresence video communication server firmware","cisco/telepresence conductor firmware"],"epss":{"score":0.71767,"percentile":0.99422,"date":"2026-10-27","history":[{"date":"2026-10-11","score":0.7111,"percentile":0.99397}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 71.8%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/28/2","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/3","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/4","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/104976","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1041424","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1041434","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2384","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2395","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2402","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2403","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2645","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2776","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2785","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2789","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2790","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2791","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2924","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2933","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e","tags":["Patch","Vendor Advisory"],"source":"cret@cert.org"},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://security.netapp.com/advisory/ntap-20180815-0003/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://support.f5.com/csp/article/K95343321","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://support.f5.com/csp/article/K95343321?utm_source=f5support&amp%3Butm_medium=RSS","source":"cret@cert.org"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3732-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3732-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3741-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3741-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3742-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3742-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3763-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack","tags":["Mitigation","Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.debian.org/security/2018/dsa-4266","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/962459","tags":["Third Party Advisory","US Government Resource"],"source":"cret@cert.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["Patch","Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.synology.com/support/security/Synology_SA_18_41","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/28/2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/3","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/4","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/104976","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041424","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041434","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2384","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2395","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2402","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2403","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2645","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2776","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2785","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2789","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2790","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2791","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5390","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}