tcp: secure_seq: add back ports to TS offset (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.17 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This reverts 28ee1b746f49 ("secure_seq: downgrade to per-host timestamp offsets") tcp_tw_recycle went away in 2017. Zhouyan Deng reported off-path TCP source port leakage via SYN cookie side-channel that can be fixed in multiple ways. One of them is to bring back TCP ports in TS offset randomization. As a bonus, we perform a single siphash() computation to provide both an ISN and a TS offset.
Références
- https://git.kernel.org/stable/c/025f532d8c5cfac77845e50daab7f478b360f2ac
- https://git.kernel.org/stable/c/e873e8c16b2fb743a381a9e59c108e63512301ec
- https://git.kernel.org/stable/c/5da5662181ef8a251e3ba564903002c2e87de452
- https://git.kernel.org/stable/c/eae2f14ab2efccdb7480fae7d42c4b0116ef8805
- https://git.kernel.org/stable/c/46e5b0d7cf55821527adea471ffe52a5afbd9caf
- https://git.kernel.org/stable/c/165573e41f2f66ef98940cf65f838b2cb575d9d1
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2026-12810
- GCVE · GCVE-0-2026-23247
Avis du CERT-FR
- CERTFR-2026-AVI-0809 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*> 4.11 < 6.18.17cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.7cpe:2.3:o:linux:linux_kernel:4.10.14:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.11:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.11:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.11:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.11:rc8:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < 025f532d8c5cfac77845e50daab7f478b360f2ac ; affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < e873e8c16b2fb743a381a9e59c108e63512301ec ; affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < 5da5662181ef8a251e3ba564903002c2e87de452 ; affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < eae2f14ab2efccdb7480fae7d42c4b0116ef8805 ; affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < 46e5b0d7cf55821527adea471ffe52a5afbd9caf ; affected 28ee1b746f493b7c62347d714f58fbf4f70df4f0 < 165573e41f2f66ef98940cf65f838b2cb575d9d1 |
| Linux · Linux | affected 4.11 ; unaffected 0 < 4.11 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.94 ≤ 6.12.* ; unaffected 6.18.17 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |