PT-2021-6032 · Linux+8 · Linux Kernel+8

Liboheng · Published 2021-03-24 · Updated 2023-05-17 · CVE-2021-45486

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.4

Description The issue is related to an information leak in the IPv4 implementation of the Linux kernel. This leak is caused by a small hash table in net/ipv4/route.c. The vulnerability may allow a remote attacker to gain unauthorized access to protected information.

Recommendations For Linux kernel versions prior to 5.12.4, update to version 5.12.4 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update can be applied.

Fix

Use of Insufficiently Random Values

Use of a Broken Cryptographic Algorithm

Information Disclosure

Weakness Enumeration

CWE-330

CWE-327

CWE-200

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-1833

ALT-PU-2021-1888

ALT-PU-2021-1896

ALT-PU-2021-1990

ALT-PU-2021-3481

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

AZL-7098

BDU:2022-00613

CESA-2022_1975

CESA-2022_1988

CVE-2021-45486

OESA-2022-1504

OPENSUSE-SU-2022:0056-1

OPENSUSE-SU-2022:0131-1

OPENSUSE-SU-2022:0169-1

OPENSUSE-SU-2022:0198-1

OPENSUSE-SU-2022:0366-1

OPENSUSE-SU-2022_0056-1

OPENSUSE-SU-2022_0131-1

OPENSUSE-SU-2022_0169-1

OPENSUSE-SU-2022_0198-1

OPENSUSE-SU-2022_0366-1

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022:6983

RHSA-2022:6991

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2022:0056-1

SUSE-SU-2022:0068-1

SUSE-SU-2022:0079-1

SUSE-SU-2022:0080-1

SUSE-SU-2022:0090-1

SUSE-SU-2022:0131-1

SUSE-SU-2022:0169-1

SUSE-SU-2022:0197-1

SUSE-SU-2022:0198-1

SUSE-SU-2022:0289-1

SUSE-SU-2022:0362-1

SUSE-SU-2022:0366-1

SUSE-SU-2022:0367-1

SUSE-SU-2022:0371-1

SUSE-SU-2022:0477-1

USN-5361-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 390

• https://ubuntu.com/security/CVE-2021-28964 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1988 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0131-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0131-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0367-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45486 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0198-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-0935 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1988 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-3702 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0477-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-39636 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0079-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-31916 · Vendor Advisory