Summary

Security Advisory ID : BSA-2019-827

Component : Kernel

Revision : 1.0

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11.

Affected Products

Brocade Fabric OS versions before v9.0.1b and v8.2.3a

Products Confirmed Not Vulnerable

No other Brocade Fibre Channel Products from Broadcom products are currently known to be affected by this vulnerability.

Solution

A security update has been provided in Brocade Fabric OS versions v9.0.1b and v8.2.3a

Credit

This issue was discovered through security testing.

Revision History