PT-2024-8978 · Linux+7 · Linux Kernel+7
Christian Rossow
+1
·
Published
2024-04-30
·
Updated
2025-09-29
·
CVE-2023-52881
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.2
Description:
The issue is related to the Linux kernel's handling of ACK packets in TCP connections. Specifically, the kernel would accept ACK packets with acknowledgment numbers that acknowledge data never sent by the server. This could potentially allow an attacker to exploit the vulnerability. The patch for this issue makes the ACK check more stringent, only accepting ACKs that are within a specific range. This refinement improves TCP security at a little cost.
Recommendations:
To resolve this issue, update the Linux kernel to version 4.2 or later. If updating is not possible, consider applying the patch manually or using a workaround provided by the Linux community. As a temporary workaround, consider disabling the affected TCP connections or restricting access to the vulnerable kernel until a patch is available.
Exploit
Fix
UI Misrepresentation of Critical Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse