[LSN-0052-1] Linux kernel vulnerability (SACKs)

---------- Forwarded message ---------
From:
Date: Jun 19, 2019 6:33AM

Jonathan Looney discovered that an integer overflow existed in the Linux
kernel when handling TCP Selective Acknowledgments (SACKs). A remote
attacker could use this to cause a denial of service (system crash).
(CVE-2019-11477)

Jonathan Looney discovered that the TCP retransmission queue implementation
in the Linux kernel could be fragmented when handling certain TCP Selective
Acknowledgment (SACK) sequences. A remote attacker could use this to cause
a denial of service. (CVE-2019-11478)

References:
  CVE-2019-11477, CVE-2019-11478