Description
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Kernel
kernel 6.5-rc1affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2175903 ↗
- https://www.debian.org/security/2023/dsa-5480 ↗
- https://www.debian.org/security/2023/dsa-5492 ↗
- https://security.netapp.com/advisory/ntap-20230929-0006/ ↗
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html ↗
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html ↗