CVE-2024-41007

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's TCP component, where a TCP socket using TCP USER TIMEOUT can retransmit packets every two jiffies (2 ms for HZ=1000) for about 4 minutes after TCP USER TIMEOUT has expired, if the other peer retracts its window to zero. The fix involves making sure tcp rtx probe0 timed out() takes icsk->icsk user timeout into account. Before a specific commit, the socket would not timeout after icsk->icsk user timeout, but would use standard exponential backoff for the retransmits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.