CVE - CVE-2024-41007

CVE-ID
CVE-2024-41007	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCP_USER_TIMEOUT has 'expired'. The fix is to make sure tcp_rtx_probe0_timed_out() takes icsk->icsk_user_timeout into account. Before blamed commit, the socket would not timeout after icsk->icsk_user_timeout, but would use standard exponential backoff for the retransmits. Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/04317a2471c2f637b4c49cbd0e9c0d04a519f570 URL:https://git.kernel.org/stable/c/04317a2471c2f637b4c49cbd0e9c0d04a519f570 MISC:https://git.kernel.org/stable/c/5d7e64d70a11d988553a08239c810a658e841982 URL:https://git.kernel.org/stable/c/5d7e64d70a11d988553a08239c810a658e841982 MISC:https://git.kernel.org/stable/c/66cb64a1d2239cd0309f9b5038b05462570a5be1 URL:https://git.kernel.org/stable/c/66cb64a1d2239cd0309f9b5038b05462570a5be1 MISC:https://git.kernel.org/stable/c/7bb7670f92bfbd05fc41a8f9a8f358b7ffed65f4 URL:https://git.kernel.org/stable/c/7bb7670f92bfbd05fc41a8f9a8f358b7ffed65f4 MISC:https://git.kernel.org/stable/c/97a9063518f198ec0adb2ecb89789de342bb8283 URL:https://git.kernel.org/stable/c/97a9063518f198ec0adb2ecb89789de342bb8283 MISC:https://git.kernel.org/stable/c/d2346fca5bed130dc712f276ac63450201d52969 URL:https://git.kernel.org/stable/c/d2346fca5bed130dc712f276ac63450201d52969 MISC:https://git.kernel.org/stable/c/dfcdd7f89e401d2c6616be90c76c2fac3fa98fde URL:https://git.kernel.org/stable/c/dfcdd7f89e401d2c6616be90c76c2fac3fa98fde MISC:https://git.kernel.org/stable/c/e113cddefa27bbf5a79f72387b8fbd432a61a466 URL:https://git.kernel.org/stable/c/e113cddefa27bbf5a79f72387b8fbd432a61a466
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)