AZL-43392
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-43392.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-43392
- Upstream
- Published
- 2024-07-15T09:15:02Z
- Modified
- 2026-04-01T05:15:05.723172Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- CVE-2024-41007 affecting package kernel for versions less than 6.6.43.1-7
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
tcp: avoid too many retransmit packets
If a TCP socket is using TCPUSERTIMEOUT, and the other peer retracted its window to zero, tcpretransmittimer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCPUSERTIMEOUT has 'expired'.
The fix is to make sure tcprtxprobe0timedout() takes icsk->icskusertimeout into account.
Before blamed commit, the socket would not timeout after icsk->icskusertimeout, but would use standard exponential backoff for the retransmits.
Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.
- References