TCP SACK (CVE-2019-5599)

Lowell Gilbert freebsd-security-local at be-well.ilk.org
Tue Jun 18 14:54:24 UTC 2019


mike tancsa <mike at sentex.net> writes:

> *How does I know if this is enabled in my default kernel on RELENG_12 ?
> There is some vague mention in various forums this is not the default on
> FreeBSD ? Can anyone shed more light as to how this does/does not impact
> FreeBSD ?

If the net.inet.tcp.functions_default sysctl doesn't list "rack", you
don't have to worry about it. As far as I can see from a quick look at
my source tree, you would have to load a module to use it.


More information about the freebsd-security mailing list