Linux kernel -stable discussions
 help / color / mirror / Atom feed
From: Willy Tarreau <w@1wt.eu>
To: mancha security <mancha1@zoho.com>
Cc: stable@vger.kernel.org, jslaby@suse.cz, edumazet@google.com
Subject: Re: [PATCH 3.10.x/3.12.x] net: challenge ACK side-channel attack mitigation (CVE-2016-5696)
Date: Fri, 19 Aug 2016 07:19:22 +0200	[thread overview]
Message-ID: <20160819051922.GF17944@1wt.eu> (raw)
In-Reply-To: <20160818223339.GA7217@zoho.com>

Hi,

On Thu, Aug 18, 2016 at 10:33:39PM +0000, mancha security wrote:
> Hello.
> 
> Recently Yue Cao et al. published findings related to a side-channel
> vulnerability in Linux's RFC 5961 TCP challenge ACK implementation in
> kernels 3.6+.
> 
> They find the vulnerability can be leveraged by off-path attackers to
> trigger connection terminations or data injection. [1]
> 
> The attached backported mitigation for use with 3.10.x (applies cleanly
> to 3.10.102) is based on Eric Dumazet's (& Linus Torvalds') mainline
> patch. [2]
> 
> I submit it for your consideration for inclusion in 3.10.103.
> 
> Additionally, it is sufficiently self-contained so it likely can be used
> with 3.12.x.

That's very kind of you, but Chas Williams already provided us with this
backport. I hope to be able to work on 3.10.103 this week-end.

Thanks!
Willy

  reply	other threads:[~2016-08-19  5:19 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-08-18 22:33 [PATCH 3.10.x/3.12.x] net: challenge ACK side-channel attack mitigation (CVE-2016-5696) mancha security
2016-08-19  5:19 ` Willy Tarreau [this message]
2016-08-19  5:48   ` mancha security
2016-08-19  5:50     ` Willy Tarreau

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160819051922.GF17944@1wt.eu \
    --to=w@1wt.eu \
    --cc=edumazet@google.com \
    --cc=jslaby@suse.cz \
    --cc=mancha1@zoho.com \
    --cc=stable@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox