DF-5828
Received-message CRCs (hdr_crc, aux_crc) are never validated
Summary
The transmit side computes aux_crc and hdr_crc but the receive path never verifies either field for incoming messages β the CRC fields are stored and ignored. An active on-path attacker (MITM on the TCP link between cluster nodes) can tamper with message bodies undetected; combined with DF-5825-class state-machine weaknesses this removes a defense-in-depth layer the protocol documents as required integrity (dmsg.h:187-196). Impact limited to integrity of an already trust-free channel (the peer itself gains nothing). Verify-iscsi_crc32-and-drop-link fix proposed.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-5828 Β· 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 1.0 KB | view raw |
Fix verification
not_testablebaseline noβ patch + rebuild βpatched clean
per-fix-DF-5828
Confirmed kernel references
Detail
Evidence (decisive lines)
static trace; cross-refs in DF-5825 evidence pack
Verified recommended fix
verify hdr_crc/aux_crc on receive
Verdict
untested (Info/Low hardening or race-bound leak - Phase V not applicable or not economical per contract; DF-5825 pack carries the transport proof)
No comments yet.