CVE-2012-3412
First published: Tue Jul 31 2012(Updated: )
A peer (or local user) may cause TCP to use a nominal MSS of as little as 88 (actual MSS of 76 with timestamps). Given that we have a sufficiently prodigious local sender and the peer ACKs quickly enough, it is nevertheless possible to grow the window for such a connection to the point that we will try to send just under 64K at once. This results in a single skb that expands to 861 segments. In some drivers with TSO support, such an skb will require hundreds of DMA descriptors; a substantial fraction of a TX ring or even more than a full ring. The TX queue selected for the skb may stall and trigger the TX watchdog repeatedly (since the problem skb will be retried after the TX reset). Upstream patch: <a href="http://www.spinics.net/lists/netdev/msg206332.html">http://www.spinics.net/lists/netdev/msg206332.html</a> References: <a href="http://seclists.org/oss-sec/2012/q3/171">http://seclists.org/oss-sec/2012/q3/171</a> Acknowledgements: Red Hat would like to thank Ben Hutchings of Solarflare (tm) for reporting this issue.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux kernel | <3.0.44 | |
| Linux kernel | >=3.1<3.2.30 | |
| Linux kernel | >=3.3<3.4.12 | |
| Linux kernel | >=3.5<3.5.5 | |
| Ubuntu Linux | =10.04 | |
| Ubuntu Linux | =11.04 | |
| Ubuntu Linux | =11.10 | |
| Ubuntu Linux | =12.04 | |
| Linux Kernel | <3.0.44 | |
| Linux Kernel | >=3.1<3.2.30 | |
| Linux Kernel | >=3.3<3.4.12 | |
| Linux Kernel | >=3.5<3.5.5 | |
| Ubuntu | =10.04 | |
| Ubuntu | =11.04 | |
| Ubuntu | =11.10 | |
| Ubuntu | =12.04 | |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html
- http://rhn.redhat.com/errata/RHSA-2012-1323.html
- http://rhn.redhat.com/errata/RHSA-2012-1324.html
- http://rhn.redhat.com/errata/RHSA-2012-1347.html
- http://rhn.redhat.com/errata/RHSA-2012-1375.html
- http://rhn.redhat.com/errata/RHSA-2012-1401.html
- http://rhn.redhat.com/errata/RHSA-2012-1430.html
- http://secunia.com/advisories/50633
- http://secunia.com/advisories/50732
- http://secunia.com/advisories/50811
- http://secunia.com/advisories/51193
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30
- http://www.openwall.com/lists/oss-security/2012/08/03/4
- http://www.ubuntu.com/usn/USN-1567-1
- http://www.ubuntu.com/usn/USN-1568-1
- http://www.ubuntu.com/usn/USN-1572-1
- http://www.ubuntu.com/usn/USN-1575-1
- http://www.ubuntu.com/usn/USN-1577-1
- http://www.ubuntu.com/usn/USN-1578-1
- http://www.ubuntu.com/usn/USN-1579-1
- http://www.ubuntu.com/usn/USN-1580-1
- https://bugzilla.redhat.com/show_bug.cgi?id=844714
- https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c
- https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html
- http://www.spinics.net/lists/netdev/msg206332.html
- http://seclists.org/oss-sec/2012/q3/171
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=845558
- https://rhn.redhat.com/errata/RHSA-2012-1324.html
- https://rhn.redhat.com/errata/RHSA-2012-1323.html
- https://rhn.redhat.com/errata/RHSA-2012-1347.html
- https://rhn.redhat.com/errata/RHSA-2012-1366.html
- https://rhn.redhat.com/errata/RHSA-2012-1375.html
- https://rhn.redhat.com/errata/RHSA-2012-1401.html
- https://rhn.redhat.com/errata/RHSA-2012-1430.html
- https://launchpad.net/bugs/cve/CVE-2012-3412
- https://security-tracker.debian.org/tracker/CVE-2012-3412
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3412
- https://nvd.nist.gov/vuln/detail/CVE-2012-3412
- https://ubuntu.com/security/CVE-2012-3412
Frequently Asked Questions
What is the severity of CVE-2012-3412?
CVE-2012-3412 is considered medium severity.
How do I fix CVE-2012-3412?
To resolve CVE-2012-3412, update the Linux kernel to a version that is not vulnerable, such as 3.0.44 or later.
What versions of Linux Kernel are affected by CVE-2012-3412?
CVE-2012-3412 affects Linux Kernel versions up to 3.0.44 and certain versions between 3.1 and 3.5.5.
What types of users can exploit CVE-2012-3412?
CVE-2012-3412 can be exploited by peers or local users who can control TCP connections.
Is CVE-2012-3412 a local or remote vulnerability?
CVE-2012-3412 is primarily a local vulnerability, as it requires access to the affected system.
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-3412
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/weakness
- agent/remedy
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/trending
- agent/last-modified-date
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/event
- agent/author
- agent/softwarecombine
- agent/tags
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- vendor/linux
- canonical/linux kernel
- version/linux kernel/3.1
- version/linux kernel/3.3
- version/linux kernel/3.5
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/10.04
- version/ubuntu linux/11.04
- version/ubuntu linux/11.10
- version/ubuntu linux/12.04
- package-manager/debian
- canonical/ubuntu
- version/ubuntu/10.04
- version/ubuntu/11.04
- version/ubuntu/11.10
- version/ubuntu/12.04