Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT, and the other peer retracted its window to zero, tcp_retransmit_timer() can retransmit a packet every two jiffies (2 ms for HZ=1000), for about 4 minutes after TCP_USER_TIMEOUT has 'expired'. The fix is to make sure tcp_rtx_probe0_timed_out() takes icsk->icsk_user_timeout into account. Before blamed commit, the socket would not timeout after icsk->icsk_user_timeout, but would use standard exponential backoff for the retransmits. Also worth noting that before commit e89688e3e978 ("net: tcp: fix unexcepted socket die when snd_wnd is 0"), the issue would last 2 minutes instead of 4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-18 | 1 | Patch1 |
| 2026-03-10 | 1 | General1 |
| 2026-03-25 | 1 | General1 |
| 2026-04-24 | 1 | General1 |
| 2026-06-07 | 1 | Disclosure1 |
Vulnerabilidad en kernel de Linux (CVE-2024-41007) https://ciberseguridadhoy.es/vulnerabilidad-en-kernel-de-linux-cve-2024-41007/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The text only references a Linux kernel CVE with a link to an article, providing no further technical, exploitation, or mitigation details.
Vulnerabilidad en kernel de Linux (CVE-2024-41007) https://ciberseguridadhoy.es/vulnerabilidad-en-kernel-de-linux-cve-2024-41007/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The text announces the existence of a Linux kernel vulnerability (CVE‑2024‑41007) but provides no additional technical or operational details.
Vulnerabilidad en kernel de Linux (CVE-2024-41007) https://ciberseguridadhoy.es/vulnerabilidad-en-kernel-de-linux-cve-2024-41007/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The text references a Linux kernel vulnerability (CVE-2024-41007) but offers no further details, making it impossible to classify beyond a general mention.
Vulnerabilidad en kernel de Linux (CVE-2024-41007) https://ciberseguridadhoy.es/vulnerabilidad-en-kernel-de-linux-cve-2024-41007/?utm_source=ReviveOldPost&utm_medium=social&utm_campaign=ReviveOldPost
Post summary
The passage announces a Linux kernel vulnerability (CVE-2024-41007) and links to an external article, but provides no additional details regarding PoC, exploitation tools, active attacks, patches, or technical specifics.
Microsoft publishes details on CVE-2025-38264 and CVE-2024-41007, critical flaws in TCP and NVMe over TCP that may impact systems using these protocols. Review and apply mitigations. #CVE https://threatcluster.io/cluster/cve-2025-38264-and-cve-2024-41007-published-by-microsoft-9d2bb47a
Post summary
Microsoft disclosed CVE‑2025‑38264 and CVE‑2024‑41007 as critical TCP and NVMe over TCP flaws, advising users to review and apply available mitigations.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |