CVE-2018-1000026: Canonical Ubuntu Linux

High severity, CVSS 7.7. EPSS: 4% chance of exploitation in the next 30 days.

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 17.10 only
• Debian Debian Linux: version 8.0 only
• Linux Linux Kernel: from 2.6.12, before 4.4.181 (fixed in 4.4.181); from 4.5.0, before 4.9.159 (fixed in 4.9.159); from 4.10, before 4.14.102 (fixed in 4.14.102); from 4.15, before 4.16 (fixed in 4.16)
• Red Hat Enterprise Linux: version 7.0 only
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only

Published 2018-02-09. Last modified 2026-06-17.