https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:13:47.379392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-11478 CVE-2019-11478 — SACK can cause extensive memory use via fragmented resend queue 2026-10-12T20:13:47.394369+00:00

Affected: Linux kernel

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.