WID-SEC-W-2022-0232

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Linux Kernel: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2021-12-26

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2021-45486USlow3.5OT elevated—
In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.
CVE-2021-45485UShigh7.5OT elevatedExploit
In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't pro…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan