New vulnerability discovered by Netflix can kernel panic Linux

Here's the actual Bulletin from Netflix. https://github.com/Netflix/security-bulletins/blob/master/ad...

The Arstechnica article misses a few points, but basically SACK is fairly broken on Linux and inconvenient on FreeBSD only if you're using the "RACK" TCP stack, which isn't enabled by default.

Previous HN discussion of the issue here: https://news.ycombinator.com/item?id=20205566