Description (CNA)
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Kernel | affected kernel 6.5-rc1 |
CWE
CWE-400
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2175903
- https://www.debian.org/security/2023/dsa-5480
- https://www.debian.org/security/2023/dsa-5492
- https://security.netapp.com/advisory/ntap-20230929-0006/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
ADP enrichment
No English description supplied.
- https://bugzilla.redhat.com/show_bug.cgi?id=2175903
- https://www.debian.org/security/2023/dsa-5480
- https://www.debian.org/security/2023/dsa-5492
- https://security.netapp.com/advisory/ntap-20230929-0006/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
No English description supplied.
No references supplied.
No English description supplied.