CVE-2018-5390

CVE-2018-5390, also known as "SegmentSmack," is a denial-of-service vulnerability affecting Linux kernel versions 4.9 and later, impacting various products from vendors like Canonical, Red Hat, and Cisco. An unauthenticated remote attacker can exploit this flaw by forcing the kernel to execute resource-intensive TCP queue operations for every incoming packet. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to a complete denial of service. While not listed in CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, it has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.