Linux Kernel: Network Stack DoS Hardening
Kernel activity centers on closing denial-of-service paths in networking — capping stacked NSH segmentation recursion and breaking TLS connections flooded with empty records — alongside a 227-commit networking fix batch for 7.4-rc3 and btrfs zoned-mode corrections.
Duration: PT2M15S
Episode overview
This episode is a short developer briefing from Linux Kernel.
It explains recent repository work in plain language.
- Show: Linux Kernel
- Published: 2026-11-13T14:15:22Z
- Audio duration: PT2M15S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's Friday, November 13th, 2026, and this is your Linux kernel briefing.
The through-line today is hardening the network stack against packets that cost almost nothing to send but can pin the kernel.
First, generic segmentation offload recursion. Eric Dumazet's fix in commit 3921fb1 caps stacked Network Service Headers during segmentation. A 64-kilobyte large-send packet built from eight-byte service headers can recurse about eight thousand times, blowing through the kernel stack guard page. It was reproducible…
Second, Transport Layer Security empty records. Jakub Kicinski's change in commit 201f053 breaks the connection after more than 128 consecutive zero-length data records. The standard allows empty records for cover traffic, but there was no bound: a fast sender could keep the receiver decrypting in the kernel,…
Around those, today's merges are stabilization: a 227-commit networking pull for 7 point 4 release candidate 3 covering T C P, generic receive offload and driver crashes, plus B T R F S zoned-mode fixes for active-zone counting, zone resets and locking, and a physical-layer fix restoring correct 10 megabit…
What to remember: assume aggressive segmentation…
Nearby episodes from Linux Kernel
- VFS Reclaim and Mount Race Fixes
- Memory Races, IOMMU Mitigation and Filesystem Fixes
- Keys and Probes Hardening
- RC2 Stabilization Across Storage and Core CPU Paths
- Weekly Recap - Storage Hardening and Scheduler Stability
- Filesystem and Driver Hardening for 7.4
- Stabilization Fixes for I/O, Arm64 and Filesystems
- RC2 Stabilization on Memory and Networking