CVE-2018-5391

CVE-2018-5391, known as "FragmentSmack," is a denial-of-service vulnerability affecting Linux kernels version 3.9 and later, including various distributions and products from vendors like Canonical, Debian, Red Hat, and Siemens. An unauthenticated attacker can remotely trigger a denial of service by sending specially crafted IP fragments, leveraging an increased IP fragment reassembly queue size. While rated as HIGH severity (CVSS 7.5), there is no evidence of active exploitation, nor are there public exploits available in Metasploit, Nuclei, or ExploitDB. Despite the lack of current exploitation, it has garnered significant community discussion and media coverage, indicating awareness of its potential impact.