]> www.infradead.org Git - users/jedix/linux-maple.git/commit
Divide by zero in TCP congestion control Algorithm.
authorJesper Dangaard Brouer <brouer@redhat.com>
Wed, 19 Dec 2012 06:59:03 +0000 (22:59 -0800)
committerMaxim Uvarov <maxim.uvarov@oracle.com>
Wed, 19 Dec 2012 13:36:28 +0000 (05:36 -0800)
commit8fa55d03bd7bd0d0afc7c09b2d052ec6f957b2e0
treedbde60ab5c614a9be23c0275ae6df83eb18e1490
parent0a6154aff983cc23abac47e7b34c1936eb512350
Divide by zero in TCP congestion control Algorithm.

Orabug: 16020656
Bug-db: 14798
CVE: CVE-2012-4565
The TCP Illinois congestion control algorithm does not correctly handle a
zero number of RTTs when reading TCP stats, leading to a divide-by-zero
and kernel panic. A remote attacker could potentially use this flaw to
cause a remote denial of service.

Cc: Petr Matousek <pmatouse@redhat.com>
Signed-off-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
Reviewed-by: Guangyu Sun <guangyu.sun@oracle.com>
net/ipv4/tcp_illinois.c