Batten down the ports: Linux networking bug SegmentSmack could remotely crash systems

A networking flaw has been discovered in the Linux kernel that could trigger a remote denial-of-service attack. Versions 4.9 and up are "vulnerable to denial-of-service conditions with low rates of specially crafted packets", according to a US-CERT advisory this week. The bug is being tracked as SegmentSmack (CVE-2018-5390). …

[TrevorH]

> Most enterprise-grade Linux distributions do not yet use kernel 4.9 or above so aren't immediately affected.

Unfortunately not true. Redhat have a page https://access.redhat.com/articles/3553061 that says that RHEL6 and 7 and even 5 (which is quite dead) are all affected by this bug.

[Doctor Syntax]

"Most enterprise-grade Linux distributions do not yet use kernel 4.9 or above so aren't immediately affected."

Suse enterprise server is on 4.12. Debian Stretch and derivatives are 4.9.

[Anonymous Coward]

(insert Windows cheap-shot here...)

[kain preacher]

See if the were running windo....., Hey wait put down the clubs and bats. I thought El reg was peaceful techies .

[Anonymous Coward]

> (insert Windows cheap-shot here...)

No doubt the next silly acronym for a vulnerability will indeed be called CHEAP-shot or cheap-SHOT or maybe ChEAP-sHOT.

[Anonymous Coward]

OMFG!

HAS.

IT.

GOT.

A.

LOGO!???

[Anonymous Coward]

Re: OMFG!

You got there before me.

Not a real exploit/bug/vulnerability until it has a website and a logo shat forth by the Strategy Boutique to the deafening sound of whalesong.

[ghp]

The website, unfortunately, has been taken down.

[rjmx]

In kernel 4.17.11

For those compiling their own kernels, these changes seem to have been incorporated in kernel 4.17.11 and above.