{"action":"Upgrade linux to 4.19.37-4 or later.","affected":[{"fixed":"4.19.37-4","introduced":"0"}],"component":"linux","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.19.37-4"],"id":"tcs_01M5NDP9MJTEJP7TRSKDF89AS0","modified_at":"2026-09-21T07:01:43.556434495Z","published_at":"2019-06-19T00:15:12.640Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-11477","https://security-tracker.debian.org/tracker/CVE-2019-11477"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-11477","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-11477"}],"summary":"Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker co"}