3 ms·
New vulnerability discovered by Netflix can kernel panic Linux
- bifrost 7y agoHere's the actual Bulletin from Netflix. https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md https://github.com/Netflix/security-bulletins/blob/master/ad... The Arstechnica article misses a few points, but basically SACK is fairly broken on Linux and inconvenient on FreeBSD only if you're using the "RACK" TCP stack, which isn't enabled by default.
- bifrost 7y agoPrevious HN discussion of the issue here: https://news.ycombinator.com/item?id=20205566 https://news.ycombinator.com/item?id=20205566