SACK Panic – Multiple TCP-based remote denial-of-service issues

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by jandrese on Monday June 17, 2019 @02:45PM (#20206112)

That BUG_ON is a full up kernel panic? That's a pretty severe issue if so.

[ Parent | on HN ]

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by Twirrim on Monday June 17, 2019 @03:39PM (#20206566)

Yes. In all seriousness, this is a "drop everything and patch" situation, as soon as the patches are available.

It's a little bit more involved than a ping of death, but still, relatively easy to exploit.

[ Parent | on HN ]

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by jandrese on Monday June 17, 2019 @04:11PM (#20206834)

Seems like anybody with an open TCP port and SACK enabled (the default) is vulnerable.

[ Parent | on HN ]

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by wademealing on Tuesday June 18, 2019 @02:58AM (#20210327)

and Generic Segment offloading.

[ Parent | on HN ]

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by dsp on Monday June 17, 2019 @03:15PM (#20206363)

Yes.

[ Parent | on HN ]