In the IPv6 implementation in the Linux kernel before 5.13.3 net/ipv6/output_core.c has an information leak because of certain use of a hash table which although big doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

🗓️ 12 Jan 2022 08:00:00Reported by MicrosoftType

Information leak in Linux kernel IPv6 before 5.13.3 due to a hash table not accounting for many IPv6 source addresses.

Reporter	Title	Published	Views	Family All 288
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the Linux kernel affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Kernel (CVE-2021-45485) affects Power HMC	8 Jan 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	29 Jun 202223:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to network state information leakage (CVE-2021-20322, CVE-2021-45485, CVE-2021-45486)	16 Dec 202221:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by kernel vulnerabilities (CVE-2021-45485, CVE-2021-45486 and CVE-2022-1012)	10 Feb 202311:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect IBM Spectrum Copy Data Management	9 Jun 202217:51	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	29 Aug 202211:21	–	ibm
ATTACKERKB	CVE-2021-45485	25 Dec 202102:15	–	attackerkb
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2022:1988)	12 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : kernel (EulerOS-SA-2022-1328)	21 Mar 202200:00	–	nessus