android_kernel_samsung_a7y1.../net
Eric Dumazet 7e0a7359da tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
commit 967c05aee439e6e5d7d805e195b3a20ef5c433d6 upstream.

If mtu probing is enabled tcp_mtu_probing() could very well end up
with a too small MSS.

Use the new sysctl tcp_min_snd_mss to make sure MSS search
is performed in an acceptable range.

CVE-2019-11479 -- tcp mss hardcoded to 48

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Jonathan Lemon <jonathan.lemon@gmail.com>
Cc: Jonathan Looney <jtl@netflix.com>
Acked-by: Neal Cardwell <ncardwell@google.com>
Cc: Yuchung Cheng <ycheng@google.com>
Cc: Tyler Hicks <tyhicks@canonical.com>
Cc: Bruce Curtis <brucec@netflix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-06 18:57:33 +02:00
..
6lowpan A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
9p 9p: do not trust pdu content for stat item size 2020-04-06 15:20:01 +02:00
802 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
8021q vlan: disable SIOCSHWTSTAMP in container 2020-04-06 17:01:37 +02:00
appletalk appletalk: Fix use-after-free in atalk_proc_exit 2020-04-06 15:20:39 +02:00
atm net: atm: Fix potential Spectre v1 vulnerabilities 2020-04-06 15:28:29 +02:00
ax25 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
batman-adv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
bluetooth Bluetooth: Align minimum encryption key size for LE and BR/EDR connections 2020-04-06 16:43:10 +02:00
bridge bridge: Fix error path for kobject_init_and_add() 2020-04-06 17:01:30 +02:00
caif A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
can A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ceph A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
core ethtool: check the return value of get_regs_len 2020-04-06 18:48:01 +02:00
dcb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dccp dccp: do not use ipv6 header for ipv4 flow 2020-04-06 12:57:00 +02:00
decnet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dns_resolver A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dsa A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ethernet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hsr A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ieee802154 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ipv4 tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() 2020-04-06 18:57:33 +02:00
ipv6 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address 2020-04-06 18:20:37 +02:00
ipx A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
irda A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
iucv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
key A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
l2tp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
l3mdev A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
lapb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
llc llc: fix skb leak in llc_build_and_send_ui_pkt() 2020-04-06 18:20:39 +02:00
mac80211 mac80211/cfg80211: update bss channel on channel switch 2020-04-06 18:18:07 +02:00
mac802154 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mpls A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mptcp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ncm A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netfilter ipvs: do not schedule icmp errors from tunnels 2020-04-06 16:47:06 +02:00
netlabel A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netlink A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
netrom A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
nfc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
openvswitch openvswitch: fix flow actions reallocation 2020-04-06 15:07:42 +02:00
packet packet: Fix error path in packet_init 2020-04-06 17:01:35 +02:00
phonet A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rds net: rds: fix memory leak in rds_ib_flush_mr_pool 2020-04-06 18:45:06 +02:00
rfkill A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rose net: rose: fix a possible stack overflow 2020-04-06 12:57:06 +02:00
rxrpc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sched net: create skb_gso_validate_mac_len() 2020-04-06 18:44:21 +02:00
sctp sctp: initialize _pad of sockaddr_in before copying to user memory 2020-04-06 15:07:47 +02:00
sunrpc sunrpc: don't mark uninitialised items as VALID. 2020-04-06 16:38:50 +02:00
switchdev A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tipc tipc: fix modprobe tipc failed after switch order of device registration -v2 2020-04-06 18:20:58 +02:00
unix A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vmw_vsock A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
wimax A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
wireless mac80211/cfg80211: update bss channel on channel switch 2020-04-06 18:18:07 +02:00
x25 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
xfrm xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink 2020-04-06 18:14:29 +02:00
compat.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
socket.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sysctl_net.c A750FXXU4CTBC 2020-03-27 21:51:54 +05:30