A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-coreUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-coreUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfo | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade kernel-zfcpdump-manUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade dtb-mediatekUpgrade kernel-preemptUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-syms-azureUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade kselftests-kmp-azureUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-preempt-develUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade dtb-alUpgrade ocfs2-kmp-defaultUpgrade dtb-zteUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-source-azureUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-debug-baseUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kernel-64kbUpgrade kernel-default-kgraft-develUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-preemptUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-default-kgraftUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade dtb-apmUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade kernel-default-manUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-vanilla-develUpgrade kernel-64kb-extraUpgrade kernel-preempt-extraUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade dlm-kmp-preemptUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-livepatch-5_3_18-59_16-default | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-4.15.0-1130-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-gcp-lts-18.04 | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub