TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c96833fa18a8e82eca84b2f2d1b29fa31d80dc44
twx-linux/net
T
History
Eric Dumazet f2aa4f1a05 tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() 
commit 967c05aee4 upstream.

If mtu probing is enabled tcp_mtu_probing() could very well end up
with a too small MSS.

Use the new sysctl tcp_min_snd_mss to make sure MSS search
is performed in an acceptable range.

CVE-2019-11479 -- tcp mss hardcoded to 48

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Jonathan Lemon <jonathan.lemon@gmail.com>
Cc: Jonathan Looney <jtl@netflix.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Cc: Yuchung Cheng <ycheng@google.com>
Cc: Tyler Hicks <tyhicks@canonical.com>
Cc: Bruce Curtis <brucec@netflix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-06-17 19:52:45 +02:00
..
6lowpan
…
9p
9p: do not trust pdu content for stat item size
2019-04-20 09:15:04 +02:00
802
…
8021q
vlan: disable SIOCSHWTSTAMP in container
2019-05-16 19:42:34 +02:00
appletalk
appletalk: Fix use-after-free in atalk_proc_exit
2019-04-20 09:15:07 +02:00
atm
net: atm: Fix potential Spectre v1 vulnerabilities
2019-04-27 09:35:33 +02:00
ax25
…
batman-adv
batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
2019-05-31 06:47:33 -07:00
bluetooth
Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"
2019-06-15 11:54:59 +02:00
bpf
…
bridge
bridge: Fix error path for kobject_init_and_add()
2019-05-16 19:42:33 +02:00
caif
caif: reduce stack size with KASAN
2019-05-08 07:20:45 +02:00
can
…
ceph
libceph: wait for latest osdmap in ceph_monc_blacklist_add()
2019-03-27 14:13:51 +09:00
core
ethtool: check the return value of get_regs_len
2019-06-11 12:21:51 +02:00
dcb
…
dccp
dccp: do not use ipv6 header for ipv4 flow
2019-04-03 06:25:08 +02:00
decnet
…
dns_resolver
…
dsa
net: dsa: Fix error cleanup path in dsa_init_module
2019-05-16 19:42:34 +02:00
ethernet
…
hsr
…
ieee802154
ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
2019-04-27 09:35:40 +02:00
ife
…
ipv4
tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
2019-06-17 19:52:45 +02:00
ipv6
ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
2019-06-11 12:21:46 +02:00
ipx
…
iucv
…
kcm
kcm: switch order of device registration to fix a crash
2019-04-17 08:37:45 +02:00
key
af_key: unconditionally clone on broadcast
2019-03-23 14:35:14 +01:00
l2tp
…
l3mdev
…
lapb
…
llc
llc: fix skb leak in llc_build_and_send_ui_pkt()
2019-06-09 09:18:10 +02:00
mac80211
mac80211/cfg80211: update bss channel on channel switch
2019-05-31 06:47:22 -07:00
mac802154
…
mpls
…
ncsi
…
netfilter
netfilter: nf_tables: warn when expr implements only one of activate/deactivate
2019-05-16 19:42:30 +02:00
netlabel
…
netlink
genetlink: Fix a memory leak on error path
2019-04-03 06:25:08 +02:00
netrom
…
nfc
NFC: nci: Add some bounds checking in nci_hci_cmd_received()
2019-05-16 19:42:32 +02:00
nsh
…
openvswitch
ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
2019-04-27 09:35:40 +02:00
packet
packet: Fix error path in packet_init
2019-05-16 19:42:34 +02:00
phonet
phonet: fix building with clang
2019-03-23 14:35:16 +01:00
psample
…
qrtr
…
rds
net: rds: fix memory leak in rds_ib_flush_mr_pool
2019-06-11 12:21:45 +02:00
rfkill
…
rose
net/rose: fix unbound loop in rose_loopback_timer()
2019-05-02 09:40:34 +02:00
rxrpc
rxrpc: Fix net namespace cleanup
2019-05-08 07:20:44 +02:00
sched
net_sched: fix two more memory leaks in cls_tcindex
2019-05-16 19:42:30 +02:00
sctp
Fix memory leak in sctp_process_init
2019-06-11 12:21:44 +02:00
smc
…
strparser
…
sunrpc
sunrpc: don't mark uninitialised items as VALID.
2019-05-02 09:40:29 +02:00
switchdev
…
tipc
tipc: fix modprobe tipc failed after switch order of device registration
2019-06-09 09:18:12 +02:00
tls
…
unix
missing barriers in some of unix_sock ->addr and ->path accesses
2019-03-19 13:13:24 +01:00
vmw_vsock
vsock/virtio: Initialize core virtio vsock before registering the driver
2019-05-25 18:25:17 +02:00
wimax
…
wireless
mac80211/cfg80211: update bss channel on channel switch
2019-05-31 06:47:22 -07:00
x25
…
xfrm
xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
2019-05-25 18:25:33 +02:00
compat.c
…
Kconfig
…
Makefile
…
socket.c
…
sysctl_net.c
…