In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that…
High CVSS 7.5
Summary
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
- :
Lint boundary warnings (2)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://arxiv.org/pdf/2112.09604.pdf -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://arxiv.org/pdf/2112.09604.pdf
Sources
- NVD DATABASE
Original Links
- https://arxiv.org/pdf/2112.09604.pdf Technical Description
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 Release Notes
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99 Patch
- https://security.netapp.com/advisory/ntap-20220121-0001/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Patch
- https://arxiv.org/pdf/2112.09604.pdf Technical Description
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3 Release Notes
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99 Patch
- https://security.netapp.com/advisory/ntap-20220121-0001/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpujul2022.html Patch
Timeline
- nvd_ingest NVD