CVE-2024-41007

The CVE-2024-41007 issue is in the Linux kernel TCP retransmission logic. When a TCP socket uses TCP_USER_TIMEOUT and the peer retracts its window to zero, tcp_retransmit_timer() could endlessly retransmit a packet every two jiffies (~2 ms for HZ=1000) for about 4 minutes after expiration. The fi...