A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-headers | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.68-62.173Upgrade kernelUpgrade perf-debuginfo | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade dtb-lgUpgrade kernel-default-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-64kbUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kernel-vanillaUpgrade kernel-default-kgraft-develUpgrade kernel-kvmsmall-baseUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-source-azureUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade dtb-zteUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-azure-optionalUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade ocfs2-kmp-preemptUpgrade dtb-alUpgrade dtb-caviumUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-debug-baseUpgrade dlm-kmp-64kbUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade dtb-armUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kernel-azure-develUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-debugUpgrade kernel-docsUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade dtb-amdUpgrade kernel-vanilla-develUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-macrosUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade dtb-freescaleUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-default-manUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-kgraftUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade dlm-kmp-preemptUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-azure-baseUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade reiserfs-kmp-default | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1130-azureUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04 | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub