CVE-2012-3412 Information

Description

The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.

Reference

http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html http://rhn.redhat.com/errata/RHSA-2012-1323.html http://rhn.redhat.com/errata/RHSA-2012-1324.html http://rhn.redhat.com/errata/RHSA-2012-1347.html http://rhn.redhat.com/errata/RHSA-2012-1375.html http://rhn.redhat.com/errata/RHSA-2012-1401.html http://rhn.redhat.com/errata/RHSA-2012-1430.html http://secunia.com/advisories/50633 http://secunia.com/advisories/50732 http://secunia.com/advisories/50811 http://secunia.com/advisories/51193 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30 http://www.openwall.com/lists/oss-security/2012/08/03/4 http://www.ubuntu.com/usn/USN-1567-1 http://www.ubuntu.com/usn/USN-1568-1 http://www.ubuntu.com/usn/USN-1572-1 http://www.ubuntu.com/usn/USN-1575-1 http://www.ubuntu.com/usn/USN-1577-1 http://www.ubuntu.com/usn/USN-1578-1 http://www.ubuntu.com/usn/USN-1579-1 http://www.ubuntu.com/usn/USN-1580-1 https://bugzilla.redhat.com/show_bug.cgi?id=844714 https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html