CVE-2018-14641: Linux Kernel

Medium severity, CVSS 5.9. EPSS: 2.9% chance of exploitation in the next 30 days.

A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash in ip_do_fragment(). With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote denial-of-service.

Affected products

• Linux Linux Kernel: version 4.19 only

Published 2018-09-18. Last modified 2026-06-17.