CVE-2019-11683: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days.

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.

Affected products

• Canonical Ubuntu Linux: version 19.04 only
• Linux Linux Kernel: from 5.0, before 5.0.13 (fixed in 5.0.13)

Published 2019-05-02. Last modified 2026-06-17.