In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really special, it is only used by cross-syn co…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really special, it is only used by cross-syn connections, mostly used by fuzzers. In the following crash [1], syzbot managed to trigger a divide by zero in tcp_rcv_space_adjust() A socket makes the following state transitions, without ever calling tcp_init_transfer(), meaning tcp_init_buffer_space() is also not called. TCP_CLOSE conn…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2552c9d9440f8e7a2ed0660911ff00f25b90a0a4 Patch
- https://git.kernel.org/stable/c/34e41a031fd7523bf1cd00a2adca2370aebea270 Patch
- https://git.kernel.org/stable/c/3fe4ef0568a48369b1891395d13ac593b1ba41b1 Patch
- https://git.kernel.org/stable/c/413c33b9f3bc36fdf719690a78824db9f88a9485 Patch
- https://git.kernel.org/stable/c/94062790aedb505bdda209b10bea47b294d6394f Patch
- https://git.kernel.org/stable/c/cbf232ba11bc86a5281b4f00e1151349ef4d45cf Patch
- https://git.kernel.org/stable/c/ed5e279b69e007ce6c0fe82a5a534c1b19783214 Patch
- https://git.kernel.org/stable/c/f47d0d32fa94e815fdd78b8b88684873e67939f4 Patch
- https://www.openwall.com/lists/oss-security/2024/10/29/1 Mailing List
- http://www.openwall.com/lists/oss-security/2024/10/29/1 Mailing List
- http://www.openwall.com/lists/oss-security/2024/10/30/1 Mailing List
- http://www.openwall.com/lists/oss-security/2024/11/12/4 Mailing List
- http://www.openwall.com/lists/oss-security/2024/11/12/5 Mailing List
- http://www.openwall.com/lists/oss-security/2024/11/12/6 Mailing List
- https://git.kernel.org/stable/c/2552c9d9440f8e7a2ed0660911ff00f25b90a0a4 Patch
- https://git.kernel.org/stable/c/34e41a031fd7523bf1cd00a2adca2370aebea270 Patch
- https://git.kernel.org/stable/c/3fe4ef0568a48369b1891395d13ac593b1ba41b1 Patch
- https://git.kernel.org/stable/c/413c33b9f3bc36fdf719690a78824db9f88a9485 Patch
- https://git.kernel.org/stable/c/94062790aedb505bdda209b10bea47b294d6394f Patch
- https://git.kernel.org/stable/c/cbf232ba11bc86a5281b4f00e1151349ef4d45cf Patch
- https://git.kernel.org/stable/c/ed5e279b69e007ce6c0fe82a5a534c1b19783214 Patch
- https://git.kernel.org/stable/c/f47d0d32fa94e815fdd78b8b88684873e67939f4 Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240905-0005/ Third Party Advisory
- https://access.redhat.com/security/cve/cve-2024-36905 Third Party Advisory
- https://alas.aws.amazon.com/cve/html/CVE-2024-36905.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://github.com/cisagov/vulnrichment/issues/130 Issue Tracking
- https://www.openwall.com/lists/oss-security/2024/11/12/4 Mailing List
Timeline
- nvd_ingest NVD