Re: CVE request: kernel: possible kernel oops from user MSS

[Josh Bressers <bressers () redhat com>]

----- "Eugene Teo" <eugene () redhat com> wrote:

> With commit f5fff5dc8a7a3f395b0525c02ba92c95d42b7390, a user program
> can pass in TCP_MAXSEG of 12 (or TCPOLEN_TSTAMP_ALIGNED), and cause
> kernel oops with division by 0 in tcp_select_initial_window.
>
> Proposed patch:
> http://www.spinics.net/lists/netdev/msg146495.html
>
> Reference:
> http://www.spinics.net/lists/netdev/msg146405.html


Please use CVE-2010-4165.

Thanks.

-- 
    JB