A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade bpftool | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-devel | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade gfs2-kmp-preemptUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-default-kgraftUpgrade kernel-default-extraUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-64kb-extraUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kernel-vanilla-develUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade kernel-azure-extraUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kernel-debug-livepatch-develUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade dtb-broadcomUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade dlm-kmp-preemptUpgrade dtb-sprdUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade dtb-exynosUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-preemptUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-source-azureUpgrade dtb-zteUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-default-kgraft-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-baseUpgrade dtb-alUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-kvmsmall-develUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kernel-devel-azureUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-preempt-develUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-caviumUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-vanilla-baseUpgrade dtb-armUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-qcom | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1130-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub