CVE-2019-10638: In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel...

Security readout for executives and security teams

CVE-2019-10638 is a Linux kernel privacy weakness. Older kernels could generate IP ID values for UDP or ICMP traffic in a way that lets an attacker correlate or track a device. The described attack can be triggered through a crafted web page using WebRTC or gQUIC, but the sources do not show system takeover or active exploitation. Exposure is most likely on Linux systems running kernels older than 5.1.7 or vendor kernels that had not received the corresponding security update. End-user Linux browsers with WebRTC or gQUIC-capable traffic are relevant to the described scenario. Treat this as a moderate privacy and tracking risk, not a confirmed remote compromise issue. Patch through normal kernel maintenance, with higher priority for Linux desktops, browsers, and externally exposed user environments. Mitigation focus: Apply Linux kernel security updates from the relevant distribution vendor.; Verify the kernel includes the upstream fix or vendor backport.; Prioritize internet-browsing Linux endpoints and shared NAT environments..

Prepared

Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.