CVE-2019-11479
No sign of exploitation. No public exploitation artifact known so far.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
The Linux kernel uses a very small default TCP packet size (48 bytes) that allows remote attackers to fragment data transfers excessively, potentially overwhelming the system and causing it to become unresponsive.
CVE-2019-11479 exploits a hardcoded MSS (Maximum Segment Size) default of 48 bytes in the Linux kernel TCP stack, allowing a remote attacker to trigger excessive fragmentation of TCP retransmission queues. This results in increased memory consumption and CPU usage on the target system, leading to denial of service conditions without requiring authentication or local access.