In the Linux kernel, the following vulnerability has been resolved:
tcp: defer shutdown(SENDSHUTDOWN) for TCPSYN_RECV sockets
TCPSYNRECV state is really special, it is only used by cross-syn connections, mostly used by fuzzers.
In the following crash [1], syzbot managed to trigger a divide by zero in tcprcvspace_adjust()
A socket makes the following state transitions, without ever calling tcpinittransfer(), meaning tcpinitbuffer_space() is also not called.
TCP_CLOSE
connect() TCPSYNSENT TCPSYNRECV shutdown() -> tcpshutdown(sk, SENDSHUTDOWN) TCPFINWAIT1
To fix this issue, change tcpshutdown() to not perform a TCPSYNRECV -> TCPFIN_WAIT1 transition, which makes no sense anyway.
When tcprcvstateprocess() later changes socket state from TCPSYNRECV to TCPESTABLISH, then look at sk->skshutdown to finally enter TCPFIN_WAIT1 state, and send a FIN packet from a sane socket state.
This means tcpsendfin() can now be called from BH context, and must use GFP_ATOMIC allocations.
[1] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI CPU: 1 PID: 5084 Comm: syz-executor358 Not tainted 6.9.0-rc6-syzkaller-00022-g98369dccd2f8 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:tcprcvspaceadjust+0x2df/0x890 net/ipv4/tcpinput.c:767 Code: e3 04 4c 01 eb 48 8b 44 24 38 0f b6 04 10 84 c0 49 89 d5 0f 85 a5 03 00 00 41 8b 8e c8 09 00 00 89 e8 29 c8 48 0f af c3 31 d2 <48> f7 f1 48 8d 1c 43 49 8d 96 76 08 00 00 48 89 d0 48 c1 e8 03 48 RSP: 0018:ffffc900031ef3f0 EFLAGS: 00010246 RAX: 0c677a10441f8f42 RBX: 000000004fb95e7e RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000027d4b11f R08: ffffffff89e535a4 R09: 1ffffffff25e6ab7 R10: dffffc0000000000 R11: ffffffff8135e920 R12: ffff88802a9f8d30 R13: dffffc0000000000 R14: ffff88802a9f8d00 R15: 1ffff1100553f2da FS: 00005555775c0380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1155bf2304 CR3: 000000002b9f2000 CR4: 0000000000350ef0 Call Trace: <TASK> tcprecvmsglocked+0x106d/0x25a0 net/ipv4/tcp.c:2513 tcprecvmsg+0x25d/0x920 net/ipv4/tcp.c:2578 inet6recvmsg+0x16a/0x730 net/ipv6/afinet6.c:680 sockrecvmsgnosec net/socket.c:1046 [inline] sockrecvmsg+0x109/0x280 net/socket.c:1068 _sysrecvmsg+0x1db/0x470 net/socket.c:2803 sysrecvmsg net/socket.c:2845 [inline] dorecvmmsg+0x474/0xae0 net/socket.c:2939 _sysrecvmmsg net/socket.c:3018 [inline] _dosysrecvmmsg net/socket.c:3041 [inline] _sesysrecvmmsg net/socket.c:3034 [inline] _x64sysrecvmmsg+0x199/0x250 net/socket.c:3034 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xf5/0x240 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x77/0x7f RIP: 0033:0x7faeb6363db9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcc1997168 EFLAGS: 00000246 ORIG_RAX: 000000000000012b RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faeb6363db9 RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000001c R10: 0000000000000122 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-0b646f55"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-0f892d13"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-100f6821"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-1178fa93"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-1acbbbd6"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-1cfb2b8b"
},
{
"digest": {
"length": 773.0,
"function_hash": "121519539093491684014214715434470894597"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-1d91e62c"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-311878fd"
},
{
"digest": {
"length": 4886.0,
"function_hash": "279810231017075327856323322919251932182"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-3608089f"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-360c159f"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-391ba4de"
},
{
"digest": {
"length": 4528.0,
"function_hash": "171494774583726431938564638719405371191"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-4073ff34"
},
{
"digest": {
"length": 4407.0,
"function_hash": "213188529252835226247906937264121774830"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-43c2f54d"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-4d12c888"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-5eee12e9"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-5fa55f69"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-6326e9b9"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-683090b8"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-69853327"
},
{
"digest": {
"length": 5092.0,
"function_hash": "66481902175892011659546297842462561134"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-6ab5bc8f"
},
{
"digest": {
"length": 4502.0,
"function_hash": "171388098218097349628096841913918778577"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-7aba8fc2"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-8300431b"
},
{
"digest": {
"length": 742.0,
"function_hash": "99954432585606312823803359780364867182"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-83791db8"
},
{
"digest": {
"length": 4865.0,
"function_hash": "177056669265389327114452003890265094720"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-8a1a02d4"
},
{
"digest": {
"length": 4852.0,
"function_hash": "248709186349138653177968453198069143776"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-8a62e093"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-8c91dfae"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-8ecc6787"
},
{
"digest": {
"length": 780.0,
"function_hash": "153718260640314855251714728525340204982"
},
"target": {
"function": "tcp_send_fin",
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-8ede4b73"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-9ee36adf"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-a23a3849"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-ad411878"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-b5386760"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-b5b7fdc7"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-b77e81ef"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94062790aedb505bdda209b10bea47b294d6394f",
"id": "CVE-2024-36905-c297d8a0"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-c47fc52b"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@413c33b9f3bc36fdf719690a78824db9f88a9485",
"id": "CVE-2024-36905-c77f5ec8"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-cb2e933a"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-da9c4293"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbf232ba11bc86a5281b4f00e1151349ef4d45cf",
"id": "CVE-2024-36905-dca7ba59"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-e1d9b6bb"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3fe4ef0568a48369b1891395d13ac593b1ba41b1",
"id": "CVE-2024-36905-e4cab0ef"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"262938998355158857824254718705788702028",
"75152306708387346269609254579036619859",
"272656504667356787167509046918694022953",
"212389323825766748761684245192450024888",
"72129928439386686099891496736422597175",
"304746953490986994856295606058911997842",
"278219507587910049485148926054291761931"
]
},
"target": {
"file": "net/ipv4/tcp.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-ee552910"
},
{
"digest": {
"length": 4444.0,
"function_hash": "184820495651257190806980213610383796862"
},
"target": {
"function": "tcp_rcv_state_process",
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34e41a031fd7523bf1cd00a2adca2370aebea270",
"id": "CVE-2024-36905-eebfff24"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"331496780237603695084115835438307698059",
"183743243648357028196707892024413508538",
"331429254874171551015973030712403915363",
"226699552812494961947631526040751908585"
]
},
"target": {
"file": "net/ipv4/tcp_input.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-f42e80a8"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f47d0d32fa94e815fdd78b8b88684873e67939f4",
"id": "CVE-2024-36905-f9c40465"
},
{
"digest": {
"length": 252.0,
"function_hash": "115221598725793258463136694012023448486"
},
"target": {
"function": "tcp_shutdown",
"file": "net/ipv4/tcp.c"
},
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed5e279b69e007ce6c0fe82a5a534c1b19783214",
"id": "CVE-2024-36905-fb46a20a"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"124912215563272921638210154770373894202",
"325619282562714291135558364741002066716",
"304808957014828433617776955804282702714",
"226458230769580475732690293299739118984"
]
},
"target": {
"file": "net/ipv4/tcp_output.c"
},
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2552c9d9440f8e7a2ed0660911ff00f25b90a0a4",
"id": "CVE-2024-36905-fe0b56da"
}
]