A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-modules | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfo | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-headers | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfo | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-vanillaUpgrade kernel-default-kgraft-develUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kernel-develUpgrade kselftests-kmp-preemptUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-azure-optionalUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade dtb-exynosUpgrade kernel-preemptUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-64kb-develUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade dlm-kmp-64kbUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kselftests-kmp-azureUpgrade dtb-zteUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-develUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade dtb-alteraUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade dtb-caviumUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade cluster-md-kmp-64kbUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-default-kgraftUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade kernel-obs-qaUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-vanilla-livepatch-develUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dlm-kmp-preemptUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kernel-macrosUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-obs-buildUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kernel-vanilla-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kgraft-patch-4_12_14-95_80-default | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-generic-lpae | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub