Integer overflow in backstage kernel
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
kernel security and bug fix update
Released 2018-10-16 · Red Hat rating Important · View on Red Hat →
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.