← Search the atlas
SUSE-SU-2018:3792-1
Not scored
Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_85 fixes one issue.
The following security issue was fixed:
- CVE-2018-5391: Fixed a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may have caused a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098).
Exploit probability
Not scored
Published
November 16, 2018
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_18
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_19
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_20
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_21
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_22
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_23
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_18
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_19
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_20
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_21
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_22
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_23
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2018:3792-1
This update for the Linux Kernel 4.4.121-92_85 fixes one issue.
The following security issue was fixed:
- CVE-2018-5391: Fixed a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may have caused a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098).
View original source ↗
05 / REFERENCES
Further evidence