A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | Jul 4, 2022 | Feb 18, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Nov 24, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Dec 20, 2021 | Dec 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 28, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perf | Feb 24, 2022 | Feb 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headers | Jan 4, 2022 | Dec 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 28, 2022 | Dec 31, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 6, 2022 | Aug 26, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 13, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-debug-devel | Mar 5, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-vanillaUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade kernel-default-kgraft-develUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-livepatch-5_3_18-24_86-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-livepatch-5_3_18-59_34-defaultUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kselftests-kmp-preemptUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-livepatch-5_3_18-24_93-defaultUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-source-azureUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-livepatch-5_3_18-24_83-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kgraft-patch-4_12_14-122_98-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-livepatch-5_3_18-59_27-defaultUpgrade dtb-xilinxUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-preempt-develUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade dtb-zteUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-default-optionalUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-source-vanillaUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kernel-preempt-optionalUpgrade kernel-debug-livepatch-develUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade dtb-socionextUpgrade dlm-kmp-preemptUpgrade kernel-macrosUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade dtb-sprdUpgrade kernel-debugUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-livepatch-5_3_18-24_96-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-livepatch-5_3_18-59_24-defaultUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade dtb-freescaleUpgrade gfs2-kmp-preemptUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-default-manUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-apmUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-azure-extraUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade dtb-renesasUpgrade kgraft-patch-4_12_14-122_103-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade kernel-livepatch-5_3_18-59_37-defaultUpgrade dtb-broadcomUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_12_14-122_91-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kgraft-patch-4_12_14-122_88-defaultUpgrade kernel-vanilla-develUpgrade kernel-debug-devel | Nov 25, 2021 | Nov 24, 2021 |
| Ubuntu | — | Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-generic-lpae | Feb 3, 2022 | Nov 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub