VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 15, 2024· Updated Nov 3, 2025

tcp: avoid too many retransmit packets

CVE-2024-41007

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: avoid too many retransmit packets

If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCP_USER_TIMEOUT has 'expired'.

The fix is to make sure tcp_rtx_probe0_timed_out() takes icsk->icsk_user_timeout into account.

Before blamed commit, the socket would not timeout after icsk->icsk_user_timeout, but would use standard exponential backoff for the retransmits.

Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.

Affected products

143

Patches

8
97a9063518f1
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
66cb64a1d223
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
dfcdd7f89e40
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
e113cddefa27
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
04317a2471c2
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
5d7e64d70a11
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
d2346fca5bed
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
7bb7670f92bf
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

8

News mentions

0

No linked articles in our index yet.