A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-docUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-devel | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extra | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-preempt-livepatch-develUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade kernel-default-livepatchUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade dtb-renesasUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-default-kgraftUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kernel-vanilla-develUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-preempt-optionalUpgrade dtb-amdUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-hisiliconUpgrade kernel-vanilla-livepatch-develUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-default-manUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-sourceUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-azure-develUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade dtb-zteUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-default-kgraft-develUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-debug-baseUpgrade kselftests-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade dtb-alUpgrade kernel-symsUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-azureUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-default-develUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-preempt-develUpgrade kgraft-patch-4_12_14-95_74-default | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub