Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every previously unseen destination address. The table max_size only tells the periodic collector to reclaim entries after the cache has already exceeded the limit. It does not reclaim entries that the attacker continues to use. Reject new cache entries once either table reaches max_size * 3 / 2. The extra headroom lets the periodic collector catch up while the existing scheduler fallback continues to use the selected destination when cache creation fails. New traffic therefore stays serviceable without growing the tables further.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8b93288b4543ad5139a25a5b211a07bf755652ddaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f6e9446bfb79907d3092fc45a0054b0c3b329bfeaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 488eaba207dd2e4c5afc65e18dc237d70f01d283affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bc9ff8e64771cc32a216953fe615386f46ac1eaaaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 31028d7b970962fbeda1e9131405c76551094300affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6316d17324bd4ca400c26adb7b656c6e3447c209affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 16c83c047ecfaf226ad81d45d77fa11a3184d0e4affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2a3c3de660f96865f303fd25f1285f2ffbfd521daffected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.10.273 to ≤ 5.10.*unaffected5.15.224 to ≤ 5.15.*unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.113 to ≤ 6.12.*unaffected6.18.56 to ≤ 6.18.*unaffected7.2.10 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8b93288b4543ad5139a25a5b211a07bf755652dd ↗
- https://git.kernel.org/stable/c/f6e9446bfb79907d3092fc45a0054b0c3b329bfe ↗
- https://git.kernel.org/stable/c/488eaba207dd2e4c5afc65e18dc237d70f01d283 ↗
- https://git.kernel.org/stable/c/bc9ff8e64771cc32a216953fe615386f46ac1eaa ↗
- https://git.kernel.org/stable/c/31028d7b970962fbeda1e9131405c76551094300 ↗
- https://git.kernel.org/stable/c/6316d17324bd4ca400c26adb7b656c6e3447c209 ↗
- https://git.kernel.org/stable/c/16c83c047ecfaf226ad81d45d77fa11a3184d0e4 ↗
- https://git.kernel.org/stable/c/2a3c3de660f96865f303fd25f1285f2ffbfd521d ↗