A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-docUpgrade perfUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extra | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade python-perf | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-devel | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade python3-perf | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-default-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-azure-optionalUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-symsUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade kernel-debug-baseUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dlm-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-azure-develUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kernel-vanillaUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade reiserfs-kmp-preemptUpgrade kernel-default-kgraft-develUpgrade kselftests-kmp-preemptUpgrade kernel-64kbUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-kgraftUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade dtb-apmUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade dtb-amlogicUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dlm-kmp-preemptUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade dtb-socionextUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-obs-qaUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade ocfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kernel-vanilla-develUpgrade kernel-preempt-extraUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-livepatch-5_3_18-59_37-default | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-dell300xUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04 | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub