We have moved to a new Sailfish OS Forum. Please start new discussions there.

Revision history [back]

click to hide/show revision 1
initial version

posted 2019-06-19 00:38:34 +0200

SACK Panic CVE-2019-11477

There are several TCP networking vulnerabilities in the Linux kernels known as SACK Panic. (CVE-2019-11477) More about the publishing from Netflix [1]

Xperia XA2 Jolla C Jolla

have SACK active (easy to check via /proc/sys/net/ipv4/tcp_sack).

Will there be a Kernel fix for the issue?


[1] https://www.openwall.com/lists/oss-security/2019/06/17/5

SACK Panic CVE-2019-11477

There are several TCP networking vulnerabilities in the Linux kernels known as SACK Panic. (CVE-2019-11477) More about the publishing from Netflix [1]

Xperia XA2 XA2
Jolla C
JollaJolla

have SACK active (easy to check via /proc/sys/net/ipv4/tcp_sack).

Will there be a Kernel fix for the issue?


[1] https://www.openwall.com/lists/oss-security/2019/06/17/5

SACK Panic CVE-2019-11477(CVE-2019-11477)

There are several TCP networking vulnerabilities in the Linux kernels known as SACK Panic. (CVE-2019-11477) More about the publishing from Netflix [1]

Xperia XA2
Jolla C
Jolla

have SACK active (easy to check via /proc/sys/net/ipv4/tcp_sack).

Will there be a Kernel fix for the issue?


[1] https://www.openwall.com/lists/oss-security/2019/06/17/5