Network adapter responds to ARP or NS requests for incorrect IP addresses in Windows 7

Article translations Article translations
Article ID: 2655087 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • The ARP offload and NS offload features are enabled on a computer that is running Windows 7 in a network environment.
  • The computer obtains an IP address from the DHCP server.
  • The computer enters sleep mode.
  • The computer resumes from sleep mode and obtains a different IP address. For example, this behavior may occur because the DHCP lease is expired or because the computer connects to a different subnet.
  • The computer enters sleep mode again.
In this scenario, the ARP offload and NS offload address list that is maintained in the miniport driver is not updated by using the most recent IP address. Therefore, the network adapter responds to incorrect ARP or NS requests, and you receive notifications of duplicate IP addresses in the subnet.

CAUSE

This issue occurs because Tcpip.sys sends a notification to remove the old IP address before the miniport driver is ready to receive notifications. Therefore, the old IP address remains in the ARP offload and NS offload address list. If the list is filled up by using the old IP address, the new IP address cannot be downloaded. 

RESOLUTION

A fix is available to resolve this problem. The fix is included in security update 2688338 (MS12-032). 

For more information or to download the update, click the following article number to view the article in the Microsoft Knowledge Base:
2688338 MS12-032: Vulnerability in TCP/IP could allow elevation of privilege: May 8, 2012

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 2655087 - Last Review: May 29, 2012 - Revision: 2.0
APPLIES TO
  • Windows 7 Professional
  • Windows 7 Enterprise
  • Windows 7 Ultimate
Keywords: 
kbqfe kbhotfixserver kbfix kbsurveynew kbexpertiseinter KB2655087

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com