Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-41007— tcp: avoid too many retransmit packets

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于允许多次重新传输数据包。

CVSS 7.5 · High EPSS 0.77% · P55

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux b701a99e431db784714c32fc6b68123045714679< 7bb7670f92bfbd05fc41a8f9a8f358b7ffed65f4 affected
b701a99e431db784714c32fc6b68123045714679< d2346fca5bed130dc712f276ac63450201d52969 affected
b701a99e431db784714c32fc6b68123045714679< 5d7e64d70a11d988553a08239c810a658e841982 affected
b701a99e431db784714c32fc6b68123045714679< 04317a2471c2f637b4c49cbd0e9c0d04a519f570 affected
b701a99e431db784714c32fc6b68123045714679< e113cddefa27bbf5a79f72387b8fbd432a61a466 affected
b701a99e431db784714c32fc6b68123045714679< dfcdd7f89e401d2c6616be90c76c2fac3fa98fde affected
b701a99e431db784714c32fc6b68123045714679< 66cb64a1d2239cd0309f9b5038b05462570a5be1 affected
b701a99e431db784714c32fc6b68123045714679< 97a9063518f198ec0adb2ecb89789de342bb8283 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-41007

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
tcp: avoid too many retransmit packets
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCP_USER_TIMEOUT has 'expired'. The fix is to make sure tcp_rtx_probe0_timed_out() takes icsk->icsk_user_timeout into account. Before blamed commit, the socket would not timeout after icsk->icsk_user_timeout, but would use standard exponential backoff for the retransmits. Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于允许多次重新传输数据包。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux b701a99e431db784714c32fc6b68123045714679 ~ 7bb7670f92bfbd05fc41a8f9a8f358b7ffed65f4 -
Linux Linux 4.19 -

II. Public POCs for CVE-2024-41007

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-41007

请登录查看更多情报信息。

Other References for CVE-2024-41007 (8)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-41007

No comments yet

Leave a comment