Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41007
HistoryJul 15, 2024 - 8:48 a.m.

CVE-2024-41007 tcp: avoid too many retransmit packets

2024-07-1508:48:10
Linux
github.com
3
linux kernel
tcp user timeout
retransmit packets.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

tcp: avoid too many retransmit packets

If a TCP socket is using TCP_USER_TIMEOUT, and the other peer
retracted its window to zero, tcp_retransmit_timer() can
retransmit a packet every two jiffies (2 ms for HZ=1000),
for about 4 minutes after TCP_USER_TIMEOUT has ‘expired’.

The fix is to make sure tcp_rtx_probe0_timed_out() takes
icsk->icsk_user_timeout into account.

Before blamed commit, the socket would not timeout after
icsk->icsk_user_timeout, but would use standard exponential
backoff for the retransmits.

Also worth noting that before commit e89688e3e978 (“net: tcp:
fix unexcepted socket die when snd_wnd is 0”), the issue
would last 2 minutes instead of 4.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial