CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

Modified

AliasesSUSE-SU-2019:0955-1SUSE-SU-2019:1425-1SUSE-SU-2019:2230-1+8 more

Published 06-08-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-5390 is a high (CVSS 7.8) Uncontrolled Resource Consumption vulnerability in a10networks advanced_core_operating_system. EPSS estimates a 71.77% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 7.5 (NVD); no exploitation reported by the 5 checked sources; EPSS 72% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v2.0 (NVD)

EPSS score

71.77%

0%100%

Critical · -1.95 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

06-08-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS metrics

6 scores · 4 sources · 3 versions

v3.17.5v3.07.5v2.07.8

EPSS trend

Probability

71.77%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

Decrease -1.95 pp

From 73.72% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat49 products

enterprise_linux_desktop7.0
enterprise_linux_server7.0
enterprise_linux_server_aus6.4 | 6.5 | 6.6 | 7.2 | 7.3 | 7.4
enterprise_linux_server_eus6.4 | 6.7 | 7.2 | 7.3 | 7.4 | 7.5
enterprise_linux_server_tus6.6 | 7.2 | 7.3 | 7.4

enterprise_linux_workstation7.0
virtualization4.0
kernel< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-abi-whitelists< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-bootwrapper< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-debug< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-debug-debuginfo< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-debug-devel< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-debuginfo< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-debuginfo-common-i686< 0:2.6.32-573.62.1.el6
kernel-debuginfo-common-ppc64< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-debuginfo-common-ppc64le< 0:3.10.0-693.39.1.el7
kernel-debuginfo-common-s390x< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-debuginfo-common-x86_64< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-devel< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-doc< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-firmware< 0:2.6.32-573.62.1.el6
kernel-headers< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-kdump< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-kdump-debuginfo< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-kdump-devel< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7
kernel-rt< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-debug< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-debug-debuginfo< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-debug-devel< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-debuginfo< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-debuginfo-common-x86_64< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-devel< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-doc< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-firmware< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-trace< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-trace-debuginfo< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-trace-devel< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-vanilla< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-vanilla-debuginfo< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-rt-vanilla-devel< 1:3.10.0-693.39.1.rt56.629.el6rt
kernel-tools< 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-tools-debuginfo< 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-tools-libs< 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
kernel-tools-libs-devel< 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
perf< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
perf-debuginfo< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
python-perf< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7
python-perf-debuginfo< 0:2.6.32-573.62.1.el6 | < 0:3.10.0-693.39.1.el7 | < 0:3.10.0-327.73.1.el7

Show all 49

F514 products

big-ip_access_policy_manager≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0
big-ip_advanced_firewall_manager≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0
big-ip_analytics≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0
big-ip_application_acceleration_manager≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0
big-ip_application_security_manager≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

Show all 14

Cisco11 products

collaboration_meeting_rooms1.0
digital_network_architecture_center1.2
expresswayx8.1.0 | x8.10.1 | x8.10.2 | x8.10.3 | x8.10.4 | x8.1.1
expressway_seriesna
meeting_management1.0 | 1.0.1

Show all 11

Ubuntu11 products

linux< 3.13.0-155.205 | < 4.4.0-133.159 | < 4.15.0-30.32
linux-aws< 4.4.0-1027.30 | < 4.4.0-1065.75 | < 4.15.0-1017.17
linux-azure< 4.15.0-1019.19 | < 4.15.0-1019.19~16.04.1
linux-euclid< 4.4.0-9029.31
linux-gcp< 4.15.0-1015.15 | < 4.15.0-1015.15~16.04.1

Show all 11

Suse9 products

kgraft-patch-SLE12_Update_39&distro=SUSE Linux Enterprise Server 12-LTSS< 2-2.1
kgraft-patch-SLE12-SP1_Update_33&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 2-2.1
kgraft-patch-SLE12-SP1_Update_33&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 2-2.1
kgraft-patch-SLE12-SP2_Update_28&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 2-2.1
kgraft-patch-SLE12-SP2_Update_28&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 2-2.1

Show all 9

Debian2 products

linux< 4.17.14-1
debian_linuxEOL8.0 | 9.0

Hp2 products

aruba_airwave_amp< 8.2.7.1
aruba_clearpass_policy_manager≥ 6.6.0, ≤ 6.6.9 | ≥ 6.7.0, ≤ 6.7.5

A10networks1 product

advanced_core_operating_system3.2.2 | 3.2.2:p5 | 4.1.0 | 4.1.0:p11 | 4.1.1:p8 | 4.1.2 | 4.1.2:p4 | 4.1.4 | 4.1.4:p1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04

Linux1 product

linux_kernel≥ 4.9, < 4.9* | ≥ 4.9, < 4.18 | 4.18:rc1 | 4.18:rc2 | 4.18:rc3 | 4.18:rc4 | 4.18:rc5 | 4.18:rc6

10 vendors · 101 products

References

70 links

access.redhat.com/errata/RHSA-2018:2785Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.kb.cert.org/vuls/id/962459Third Party AdvisoryX Refsource CERT VNUS Government ResourceAdvisoryREPORT
usn.ubuntu.com/3741-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2776Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:2933Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:2403Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:2395Vendor AdvisoryX Refsource REDHATThird Party Advisory
usn.ubuntu.com/3763-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2384Vendor AdvisoryX Refsource REDHATThird Party Advisory
usn.ubuntu.com/3741-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory

Show all 70 references

access.redhat.com/errata/RHSA-2018:2402Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:2948Vendor AdvisoryX Refsource REDHATThird Party Advisory
usn.ubuntu.com/3742-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securitytracker.com/id/1041434VDB EntryX Refsource SECTRACKThird Party Advisory
usn.ubuntu.com/3732-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/bid/104976VDB EntryX Refsource BIDThird Party Advisory
lists.debian.org/debian-lts-announce/2018/08/msg00014.htmlMailing ListX Refsource MLISTThird Party Advisory
www.securitytracker.com/id/1041424VDB EntryX Refsource SECTRACKThird Party Advisory
usn.ubuntu.com/3742-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2924Vendor AdvisoryX Refsource REDHATThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcpVendor AdvisoryX Refsource CISCOThird Party Advisory
access.redhat.com/errata/RHSA-2018:2789Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.debian.org/security/2018/dsa-4266Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/errata/RHSA-2018:2645Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
usn.ubuntu.com/3732-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2791Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:2790Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.openwall.com/lists/oss-security/2019/06/28/2Mailing ListX Refsource MLISTThird Party Advisory
www.openwall.com/lists/oss-security/2019/07/06/3Mailing ListX Refsource MLISTThird Party Advisory
www.openwall.com/lists/oss-security/2019/07/06/4Mailing ListX Refsource MLISTThird Party Advisory
www.oracle.com/security-alerts/cpujul2020.htmlX Refsource MISCThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlX Refsource CONFIRMPatchThird Party Advisory
help.ecostruxureit.com/display/…X Refsource CONFIRMThird Party Advisory
security.netapp.com/advisory/ntap-20180815-0003/X Refsource CONFIRMThird Party Advisory
www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txtX Refsource CONFIRMThird Party Advisory
www.synology.com/support/security/Synology_SA_18_41X Refsource CONFIRMThird Party Advisory
support.f5.com/csp/article/K95343321X Refsource CONFIRMThird Party Advisory
www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmackX Refsource CONFIRMMitigationThird Party Advisory
git.kernel.org/pub/…X Refsource CONFIRMPatchVendor Advisory
support.f5.com/csp/article/K95343321?utm_source=f5support&amp%3Butm_medium=RSSX Refsource CONFIRM
cert-portal.siemens.com/productcert/pdf/ssa-377115.pdfX Refsource CONFIRMThird Party Advisory
www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-enX Refsource CONFIRMThird Party Advisory
www.suse.com/support/update/announcement/2019/suse-su-20190955-1/Advisory
bugzilla.suse.com/1102682REPORT
www.suse.com/security/cve/CVE-2018-5390WEB
www.suse.com/support/update/announcement/2019/suse-su-20191425-1/Advisory
www.suse.com/support/update/announcement/2019/suse-su-20192230-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/cve/cve-2018-5390ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1601704REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2645.jsonAdvisory
access.redhat.com/security/cve/CVE-2018-5390REPORT
www.cve.org/CVERecord?id=CVE-2018-5390AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2018-5390Advisory
access.redhat.com/articles/3553061ARTICLE
www.spinics.net/lists/netdev/msg514742.htmlARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2776.jsonAdvisory
bugzilla.redhat.com/show_bug.cgi?id=1616431REPORT
bugzilla.redhat.com/show_bug.cgi?id=1618466REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2789.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2790.jsonAdvisory
ubuntu.com/security/CVE-2018-5390REPORT
ubuntu.com/security/notices/USN-3732-1Advisory
ubuntu.com/security/notices/USN-3732-2Advisory
ubuntu.com/security/notices/USN-3741-1Advisory
ubuntu.com/security/notices/USN-3741-2Advisory
ubuntu.com/security/notices/USN-3742-1Advisory
ubuntu.com/security/notices/USN-3742-2Advisory
ubuntu.com/security/notices/USN-3763-1Advisory
security-tracker.debian.org/tracker/CVE-2018-5390Advisory