CVE-2012-3412
First published: Tue Jul 31 2012(Updated: )
A peer (or local user) may cause TCP to use a nominal MSS of as little as 88 (actual MSS of 76 with timestamps). Given that we have a sufficiently prodigious local sender and the peer ACKs quickly enough, it is nevertheless possible to grow the window for such a connection to the point that we will try to send just under 64K at once. This results in a single skb that expands to 861 segments. In some drivers with TSO support, such an skb will require hundreds of DMA descriptors; a substantial fraction of a TX ring or even more than a full ring. The TX queue selected for the skb may stall and trigger the TX watchdog repeatedly (since the problem skb will be retried after the TX reset). Upstream patch: <a href="http://www.spinics.net/lists/netdev/msg206332.html">http://www.spinics.net/lists/netdev/msg206332.html</a> References: <a href="http://seclists.org/oss-sec/2012/q3/171">http://seclists.org/oss-sec/2012/q3/171</a> Acknowledgements: Red Hat would like to thank Ben Hutchings of Solarflare (tm) for reporting this issue.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <3.0.44 | |
| Linux Linux kernel | >=3.1<3.2.30 | |
| Linux Linux kernel | >=3.3<3.4.12 | |
| Linux Linux kernel | >=3.5<3.5.5 | |
| Canonical Ubuntu Linux | =10.04 | |
| Canonical Ubuntu Linux | =11.04 | |
| Canonical Ubuntu Linux | =11.10 | |
| Canonical Ubuntu Linux | =12.04 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.12.5-1 6.12.6-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
- http://rhn.redhat.com/errata/RHSA-2012-1323.html
- http://rhn.redhat.com/errata/RHSA-2012-1324.html
- http://rhn.redhat.com/errata/RHSA-2012-1347.html
- http://rhn.redhat.com/errata/RHSA-2012-1375.html
- http://rhn.redhat.com/errata/RHSA-2012-1401.html
- http://rhn.redhat.com/errata/RHSA-2012-1430.html
- http://secunia.com/advisories/50633
- http://secunia.com/advisories/50732
- http://secunia.com/advisories/50811
- http://secunia.com/advisories/51193
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
- http://www.openwall.com/lists/oss-security/2012/08/03/4
- http://www.ubuntu.com/usn/USN-1567-1
- http://www.ubuntu.com/usn/USN-1568-1
- http://www.ubuntu.com/usn/USN-1572-1
- http://www.ubuntu.com/usn/USN-1575-1
- http://www.ubuntu.com/usn/USN-1577-1
- http://www.ubuntu.com/usn/USN-1578-1
- http://www.ubuntu.com/usn/USN-1579-1
- http://www.ubuntu.com/usn/USN-1580-1
- https://bugzilla.redhat.com/show_bug.cgi?id=844714
- https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c
- https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html
- http://www.spinics.net/lists/netdev/msg206332.html
- http://seclists.org/oss-sec/2012/q3/171
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=845558
- https://rhn.redhat.com/errata/RHSA-2012-1324.html
- https://rhn.redhat.com/errata/RHSA-2012-1323.html
- https://rhn.redhat.com/errata/RHSA-2012-1347.html
- https://rhn.redhat.com/errata/RHSA-2012-1366.html
- https://rhn.redhat.com/errata/RHSA-2012-1375.html
- https://rhn.redhat.com/errata/RHSA-2012-1401.html
- https://rhn.redhat.com/errata/RHSA-2012-1430.html
- https://launchpad.net/bugs/cve/CVE-2012-3412
- https://security-tracker.debian.org/tracker/CVE-2012-3412
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3412
- https://nvd.nist.gov/vuln/detail/CVE-2012-3412
- https://ubuntu.com/security/CVE-2012-3412
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-3412
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/remedy
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.1
- version/linux linux kernel/3.3
- version/linux linux kernel/3.5
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/10.04
- version/canonical ubuntu linux/11.04
- version/canonical ubuntu linux/11.10
- version/canonical ubuntu linux/12.04
- package-manager/debian