{"id":2211,"date":"2019-06-21T23:54:54","date_gmt":"2019-06-21T15:54:54","guid":{"rendered":"https:\/\/blog.naibabiji.com\/?p=2211"},"modified":"2019-11-01T10:20:06","modified_gmt":"2019-11-01T02:20:06","slug":"centos7-xiu-fu-linux-tcp-sack-panic","status":"publish","type":"post","link":"https:\/\/blog.naibabiji.com\/skill\/centos7-xiu-fu-linux-tcp-sack-panic.html","title":{"rendered":"CentOS7\u5982\u4f55\u4fee\u590dLinux TCP “SACK PANIC” \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"},"content":{"rendered":"

\u817e\u8baf\u4e91\u53d1\u516c\u544a\u8bf4\u68c0\u6d4b\u5230\u00a0Linux \u5185\u6838\u88ab\u66dd\u5b58\u5728TCP \u201cSACK PANIC\u201d \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08\u6f0f\u6d1e\u7f16\u53f7\uff1aCVE-2019-11477,CVE-2019-11478,CVE-2019-11479\uff09<\/b>\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdc\u7a0b\u653b\u51fb\u76ee\u6807\u670d\u52a1\u5668\uff0c\u5bfc\u81f4\u7cfb\u7edf\u5d29\u6e83\u6216\u65e0\u6cd5\u63d0\u4f9b\u670d\u52a1\u3002<\/p>\n

\u5f71\u54cd\u7cfb\u7edf<\/h2>\n

\u76ee\u524d\u5df2\u77e5\u53d7\u5f71\u54cd\u7248\u672c\u5982\u4e0b\uff1a
\nFreeBSD 12\uff08\u4f7f\u7528\u5230 RACK TCP \u534f\u8bae\u6808\uff09
\nCentOS 5\uff08Redhat \u5b98\u65b9\u5df2\u505c\u6b62\u652f\u6301\uff0c\u4e0d\u518d\u63d0\u4f9b\u8865\u4e01\uff09
\nCentOS 6
\nCentOS 7
\nUbuntu 18.04 LTS
\nUbuntu 16.04 LTS
\nUbuntu 19.04
\nUbuntu 18.10<\/p>\n

\u5b89\u5168\u7248\u672c<\/h2>\n

\u5404\u5927Linux\u53d1\u884c\u5382\u5546\u5df2\u53d1\u5e03\u5185\u6838\u4fee\u590d\u8865\u4e01\uff0c\u8be6\u7ec6\u5185\u6838\u4fee\u590d\u7248\u672c\u5982\u4e0b\uff1a
\nCentOS 6 \uff1a2.6.32-754.15.3
\nCentOS 7 \uff1a3.10.0-957.21.3
\nUbuntu 18.04 LTS\uff1a4.15.0-52.56
\nUbuntu 16.04 LTS\uff1a4.4.0-151.178
\nFreeBSD\uff1a\u817e\u8baf\u4e91\u5b98\u65b9\u63d0\u4f9b\u7684 FreeBSD \u955c\u50cf\u9ed8\u8ba4\u4e0d\u53d7\u8be5\u6f0f\u6d1e\u5f71\u54cd\uff0c\u8bf7\u653e\u5fc3\u4f7f\u7528\u3002<\/p>\n

\u6240\u4ee5\u4e3a\u4e86\u7f51\u7ad9\u5b89\u5168\u7740\u60f3\uff0c\u8d76\u7d27\u5347\u7ea7\u670d\u52a1\u5668\u5185\u6838\u5427\u3002\u5976\u7238\u7528\u7684\u662fCentOS7\uff0c\u4fee\u590d\u8fd9\u4e2a”SACK PANIC” \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u65b9\u6cd5\u5982\u4e0b\uff1a<\/p>\n

CentOS 6\/7 \u4fee\u590d\u65b9\u6cd5<\/h2>\n

1\uff09yum clean all && yum makecache\uff0c\u8fdb\u884c\u8f6f\u4ef6\u6e90\u66f4\u65b0\uff1b
\n2\uff09yum update kernel -y\uff0c\u66f4\u65b0\u5f53\u524d\u5185\u6838\u7248\u672c;
\n3\uff09reboot\uff0c\u66f4\u65b0\u540e\u91cd\u542f\u7cfb\u7edf\u751f\u6548;
\n4\uff09uname -a\uff0c\u68c0\u67e5\u5f53\u524d\u7248\u672c\u662f\u5426\u4e3a\u4e0a\u8ff0\u3010\u5b89\u5168\u7248\u672c\u3011\uff0c\u5982\u679c\u662f\uff0c\u5219\u8bf4\u660e\u4fee\u590d\u6210\u529f\u3002<\/p>\n

Ubuntu 16.04\/18.04 LTS\u4fee\u590d\u65b9\u6cd5<\/h2>\n

1\uff09sudo apt-get update && sudo apt-get install linux-image-generic\uff0c\u8fdb\u884c\u8f6f\u4ef6\u6e90\u66f4\u65b0\u5e76\u5b89\u88c5\u65b0\u7248\u5185\u6838\u7248\u672c\uff1b
\n2\uff09sudo reboot\uff0c\u66f4\u65b0\u540e\u91cd\u542f\u7cfb\u7edf\u751f\u6548\uff1b
\n3\uff09uname -a\uff0c\u68c0\u67e5\u5f53\u524d\u7248\u672c\u662f\u5426\u4e3a\u3010\u5b89\u5168\u7248\u672c\u3011\uff0c\u5982\u679c\u662f\uff0c\u5219\u8bf4\u660e\u4fee\u590d\u6210\u529f\u3002<\/p>\n

\u4e34\u65f6\u7f13\u89e3\u65b9\u6cd5<\/h2>\n

\u5982\u7528\u6237\u4e0d\u65b9\u4fbf\u91cd\u542f\u8fdb\u884c\u5185\u6838\u8865\u4e01\u66f4\u65b0\uff0c\u53ef\u9009\u62e9\u5982\u4e0b\u65b9\u5f0f\u7981\u7528\u5185\u6838 SACK\u914d\u7f6e\u9632\u8303\u6f0f\u6d1e\u5229\u7528\uff08\u53ef\u80fd\u4f1a\u5bf9\u7f51\u7edc\u6027\u80fd\u4ea7\u751f\u4e00\u5b9a\u5f71\u54cd\uff09\uff0c\u8fd0\u884c\u5982\u4e0b\u547d\u4ee4\u5373\u53ef\uff1a
\n1\uff09echo net.ipv4.tcp_sack = 0 >> \/etc\/sysctl.conf \uff0c\u7981\u7528 SACK \u914d\u7f6e\uff1b
\n2\uff09sysctl -p \uff0c\u91cd\u8f7d\u914d\u7f6e\uff0c\u4f7f\u5176\u751f\u6548\u3002<\/p>\n

\u5347\u7ea7\u65b0\u7248\u7248\u5185\u6838\u5e76\u4e14\u5f00\u542fbbr\u7684\u65b9\u6cd5<\/h2>\n

\u56e0\u4e3a\u5976\u7238\u4e4b\u524d\u5c31\u5347\u7ea7\u52305.1.4\u5185\u6838\u5e76\u4e14\u5f00\u542fbbr\u4e86\uff0c\u6240\u4ee5\u817e\u8baf\u4e91\u7ed9\u51fa\u7684\u5347\u7ea7\u52303.10.0-957.21.3\u5185\u6838\u7684\u65b9\u6cd5\u660e\u663e\u4e0d\u5408\u9002\u3002<\/p>\n

\u7136\u540e\u770b\u4e86\u4e0b\u6f0f\u6d1e\u53d1\u5e03\u65e5\u671f\u662f6\u670817\u65e5\uff0c\u800cCentOS 7\u65b0\u7248\u7684\u5185\u6838\u7248\u672c\u662f5.1.12\uff0c\u66f4\u65b0\u65e5\u671f\u662f 2019-06-19\uff0c\u6240\u4ee5\u5e94\u8be5\u5df2\u7ecf\u8865\u4e0a\u8fd9\u4e2a\u6f0f\u6d1e\u4e86\uff0c\u76f4\u63a5\u628a\u5185\u6838\u5347\u7ea7\u52305.1.12\uff0c\u7136\u540e\u518d\u5f00\u4e00\u6b21bbr\u5c31\u884c\u4e86\u3002<\/p>\n

\u5177\u4f53\u6559\u7a0b\u53c2\u89c1\u4e4b\u524d\u7684\u6587\u7ae0\uff1aCentOS7\u5b89\u88c5\u65b0\u7248\u5185\u6838\u548cBBR\u52a0\u901fWordPress\u6559\u7a0b<\/a><\/p>\n\n\n

\n \n
\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n<\/div>\n \n\n
\n \u7ed9\u672c\u6587\u6253\u5206 post<\/span>\n <\/div>\n <\/div>\n","protected":false},"excerpt":{"rendered":"

\u817e\u8baf\u4e91\u53d1\u516c\u544a\u8bf4\u68c0\u6d4b\u5230\u00a0Linux \u5185\u6838\u88ab\u66dd\u5b58\u5728TCP \u201cSACK PANIC\u201d \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08\u6f0f\u6d1e\u7f16\u53f7\uff1aC […]<\/p>\n","protected":false},"author":1,"featured_media":2212,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"CentOS7\u5982\u4f55\u4fee\u590dLinux TCP \"SACK PANIC\" \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e - \u5976\u7238\u5efa\u7ad9\u7b14\u8bb0","description":"\u817e\u8baf\u4e91\u53d1\u516c\u544a\u8bf4\u68c0\u6d4b\u5230\u00a0 Linux \u5185\u6838\u88ab\u66dd\u5b58\u5728TCP \u201cSACK PANIC\u201d \u8fdc\u7a0b\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08\u6f0f\u6d1e\u7f16\u53f7\uff1aCVE-2019-11477,CVE-2019-11478,CVE-2019-11479\uff09 \uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8fdc\u7a0b\u653b\u51fb\u76ee\u6807\u670d\u52a1\u5668\uff0c\u5bfc\u81f4\u7cfb\u7edf\u5d29\u6e83\u6216\u65e0\u6cd5\u63d0\u4f9b\u670d\u52a1\u3002 \u5f71\u54cd\u7cfb\u7edf \u76ee\u524d\u5df2\u77e5\u53d7\u5f71\u54cd\u7248\u672c\u5982\u4e0b\uff1a FreeBS"},"footnotes":""},"categories":[142],"tags":[],"class_list":["post-2211","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-skill"],"_links":{"self":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts\/2211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/comments?post=2211"}],"version-history":[{"count":0,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/posts\/2211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/media\/2212"}],"wp:attachment":[{"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/media?parent=2211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/categories?post=2211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.naibabiji.com\/wp-json\/wp\/v2\/tags?post=2211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}