[dozzie]

Wasn't it fixed long, long ago? As I remember, kernel developers were fixing TCP sequence numbers at some point.

[jfindley]

There's been a few TCP sequence related vulnerabilities over the years, but this is slightly different - it's actually a problem with how ACKs are processed, making it far easier than it should be to conduct a well-known attack type (blind in-window).

EDIT: it's of course still sequence related, but a new vuln, not a restarting of an older, fixed one.

[attilagyorffy]

I vaguely remember something around a potential fix but I lost track of it. The strange thing is that this appeared yesterday. I haven't had time to actually test this, am just looking to see what the community knows, whether someone could confirm this.

[cjbprime]

Someone else has already linked to a fix that the Linux kernel developers applied, which tells us that it's a confirmed problem (at least in theory): https://git.zx2c4.com/linux/commit/?id=75ff39ccc1bd5d3c455b6...