CVE-2023-53517 tipc: do not update mtu if msg_max is too small in mtu negotiation

In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msgmax is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, without checking for the minimum mtu,...

kernel: Linux kernel: Denial of Service via malicious MTU negotiation in TIPC

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC protocol. A malicious peer can exploit this by sending a specially crafted Activate message with a very small Maximum Transmission Unit MTU value during link MTU negotiation. This can lead to an integer overflow,...

kernel: Linux kernel: Denial of Service via malicious MTU negotiation in TIPC

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC protocol. A malicious peer can exploit this by sending a specially crafted Activate message with a very small Maximum Transmission Unit MTU value during link MTU negotiation. This can lead to an integer overflow,...