Home/ Questions/Q 8505025
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-11T02:12:10+00:00

I’d like to ask a question about the IPv4 fragment manager in the Linux

  • 0

I’d like to ask a question about the IPv4 fragment manager in the Linux kernel (net/ipv4/inet_fragment.c). I don’t understand why the structure inet_frags (include/net/inet_frag.h) has got an “rnd” field, which is obviously filled in with random numbers. I mean, I don’t expect my IPv4 stack to reassemble my packets in a random order ^^.

Could you help me plz? Thx in advance.
(Kernel 3.4.4)

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The implementation uses a hash to store IP datagram fragments. Hash tables with a fixed hash function are prone to denial of service hash collision attack. So, they add a random seed to each hash function to protect from the attack.

    See http://www.iss.net/security_center/reference/vuln/linux-kernel-packets-dos.htm :

    The Linux Kernel is vulnerable to a denial of service, caused by improper handling of TCP/IP fragment reassembly. A remote attacker could send specially-crafted packets that would cause a large number of hash table collisions, which would consume all available CPU resources.

    • 0