CVE-2018-14641
kernel: a bug in ip_frag_reasm() can cause a crash in ip_do_fragment()
Severity
ImportantRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 18, 2018
Updated · June 30, 2026
Description
A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel which can cause a later system crash in ip_do_fragment(). With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 6.5CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-456 · Missing Initialization of a Variable