[Bug 1846462] CVE-2019-20812 kernel: af_packet: TPACKET_V3: invalid timer timeout on error

A flaw was found in the way the af_packet functionality in the Linux kernel handled retirement timer setting for TPACKET_v3 when getting settings from the underlying network device errors out. A local user able to open af_packet domain socket and able to hit the error path could use this flaw to starve the system.



Source link