CVE-2024-41007: tcp: avoid too many retransmit packets
In the Linux kernel, the following vulnerability has been resolved:
tcp: avoid too many retransmit packets
If a TCP socket is using TCPUSERTIMEOUT, and the other peer retracted its window to zero, tcpretransmittimer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCPUSERTIMEOUT has 'expired'.
The fix is to make sure tcprtxprobe0timedout() takes icsk->icskusertimeout into account.
Before blamed commit, the socket would not timeout after icsk->icskusertimeout, but would use standard exponential backoff for the retransmits.
Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when sndwnd is 0"), the issue would last 2 minutes instead of 4.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41007?
CVE-2024-41007 is a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-41007?
To remediate CVE-2024-41007, upgrade the kernel to version 6.10 or the specific patched versions listed for your distribution.
Which Linux kernel versions are affected by CVE-2024-41007?
CVE-2024-41007 affects multiple Linux kernel versions, specifically those between 4.19 and 6.10.
What is the impact of CVE-2024-41007?
The impact of CVE-2024-41007 involves excessive retransmit packets from TCP sockets, potentially leading to network performance issues.
Is CVE-2024-41007 related to TCP sockets?
Yes, CVE-2024-41007 specifically concerns the behavior of TCP sockets using TCP_USER_TIMEOUT.