Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-21 Thread Francois Romieu
opensou...@tigusoft.pl : > On Sunday 16 June 2013 18:39:21 Francois Romieu wrote: > > Thank you for feedback. We provide XID, IRQ and additional info below. Executive summary: 1. affected Realtek nics are 8168evl (XID 0c900800) and an old PCI (XID 1800) 2. failing marvell nic resorts to

Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-21 Thread opensou...@tigusoft.pl
On Sunday 16 June 2013 18:39:21 Francois Romieu wrote: Thank you for feedback. We provide XID, IRQ and additional info below. If you read previous report you can skip to "info1" part of the text. In a gigabit network almost half of various linux computers with RTL8111/8168B, and other NICs

Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-21 Thread opensou...@tigusoft.pl
On Sunday 16 June 2013 18:39:21 Francois Romieu wrote: Thank you for feedback. We provide XID, IRQ and additional info below. If you read previous report you can skip to info1 part of the text. In a gigabit network almost half of various linux computers with RTL8111/8168B, and other NICs can

Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-21 Thread Francois Romieu
opensou...@tigusoft.pl opensou...@tigusoft.pl : On Sunday 16 June 2013 18:39:21 Francois Romieu wrote: Thank you for feedback. We provide XID, IRQ and additional info below. Executive summary: 1. affected Realtek nics are 8168evl (XID 0c900800) and an old PCI (XID 1800) 2. failing

Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-16 Thread Francois Romieu
opensou...@tigusoft.pl : [...] > Thanks for helping to debug and find this problem: tigusoft.pl , #grsecurity > , > Arach , Admin2501 , R.Freeman > > > We await any instructions how to debug this further. Please send the XID of Realtek devices you own ('dmesg | grep XID'). r8169 support

hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-16 Thread opensou...@tigusoft.pl
We found possible from-LAN DDoS bug. Since the conditions that trigger it are not that common and hopefully are not easy achieved from outside of LAN, and we do not have yet the time to propose a patch right now, it was decided to publish this report now for your help with analyzing it,

hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-16 Thread opensou...@tigusoft.pl
We found possible from-LAN DDoS bug. Since the conditions that trigger it are not that common and hopefully are not easy achieved from outside of LAN, and we do not have yet the time to propose a patch right now, it was decided to publish this report now for your help with analyzing it,

Re: hanging, and possible exploit/ddos from LAN for RTL and other cards (watchdog netdev)

2013-06-16 Thread Francois Romieu
opensou...@tigusoft.pl opensou...@tigusoft.pl : [...] Thanks for helping to debug and find this problem: tigusoft.pl , #grsecurity , Arach , Admin2501 , R.Freeman We await any instructions how to debug this further. Please send the XID of Realtek devices you own ('dmesg | grep XID').