Information disclosure in Linux kernel - CVE-2021-45486

Vulnerability identifier: #VU63577

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-45486

CWE-ID: CWE-200

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to incorrect implementation of the IPv4 protocol in the Linux kernel. A remote attacker can disclose internal state in some situations.

Linux kernel
SUSE Linux Enterprise Micro
SUSE MicroOS
Anolis OS
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Workstation Extension
openEuler
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM DataPower Gateway
Red Hat Advanced Cluster Management for Kubernetes
Oracle VM Server for x86
IBM Elastic Storage System
IBM Spectrum Protect Plus
OpenShift Virtualization
IBM Spectrum Virtualize
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel-livepatch-5_3_18-59_40-default
kernel-cross-headers
kernel-debug-core
kernel-debug-devel
kernel-debug
kernel-debug-modules
kernel-debug-modules-extra
kernel-devel
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
perf
python3-perf
kernel-abi-stablelists
kernel-doc
kernel-core
kernel
bpftool
kernel-debugsource
python2-perf-debuginfo
kernel-source
bpftool-debuginfo
python3-perf-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
kernel-debuginfo
python2-perf
perf-debuginfo
kernel-tools-libs-devel
python-perf
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-azure-devel-debuginfo
kernel-syms-azure
kernel-devel-azure
kernel-source-azure
kernel-azure
kernel-default-debugsource
kernel-default-livepatch-devel
kernel-default-livepatch
kernel-preempt-extra-debuginfo
kernel-preempt-extra
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-default-extra-debuginfo
kernel-default-extra
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-obs-build
kernel-obs-build-debugsource
kernel-syms
kernel-preempt-devel
kernel-preempt-devel-debuginfo
kernel-docs
kernel-default-devel
kernel-default-devel-debuginfo
kernel-preempt
kernel-zfcpdump
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
kernel-macros
kernel-64kb-devel-debuginfo
kernel-64kb-devel
kernel-64kb-debugsource
kernel-64kb-debuginfo
kernel-64kb
kernel-default
kernel-default-debuginfo
kernel-default-base
kernel-devel-rt
kernel-rt-devel-debuginfo
kernel-rt
kernel-source-rt
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-rt-devel
kernel-rt-debugsource
kernel-rt-debuginfo
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
SecurID Authentication Manager
Virtualization Management Interface
IBM MQ Appliance

Install updates from vendor's website.

Linux kernel - update to 5.12.4
Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
Red Hat OpenShift Container Platform - addressed in versions 4.8.53, 4.9.51, 4.10.39
OpenShift Virtualization - update to 4.9.7
kernel (Red Hat package) - addressed in versions 4.18.0-305.65.1.el8_4, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 4.18.0-305.65.1.rt7.137.el8_4, 4.18.0-372.9.1.rt7.166.el8
IBM Elastic Storage System - update to 6.1.4.0
SecurID Authentication Manager - update to 8.6 Patch 3
IBM DataPower Gateway - update to 10.5.0.3
Virtualization Management Interface - update to FW1020.20
kernel-livepatch-5_3_18-59_40-default - update to 1-7.3.1
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-debug-core - update to 4.18.0-372.9.1
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-debug-modules - update to 4.18.0-372.9.1
kernel-debug-modules-extra - update to 4.18.0-372.9.1
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-modules - update to 4.18.0-372.9.1
kernel-modules-extra - update to 4.18.0-372.9.1
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-26
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-26
python3-perf - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
kernel-doc - update to 4.18.0-372.9.1
kernel-core - update to 4.18.0-372.9.1
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-devel - update to 4.19.90-2201.4.0.0135
kernel-debugsource - update to 4.19.90-2201.4.0.0135
python2-perf-debuginfo - update to 4.19.90-2201.4.0.0135
python3-perf - update to 4.19.90-2201.4.0.0135
kernel-source - update to 4.19.90-2201.4.0.0135
bpftool-debuginfo - update to 4.19.90-2201.4.0.0135
python3-perf-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools-devel - update to 4.19.90-2201.4.0.0135
kernel-tools - update to 4.19.90-2201.4.0.0135
kernel-debuginfo - update to 4.19.90-2201.4.0.0135
python2-perf - update to 4.19.90-2201.4.0.0135
perf-debuginfo - update to 4.19.90-2201.4.0.0135
bpftool - update to 4.19.90-2201.4.0.0135
kernel - update to 4.19.90-2201.4.0.0135
perf - update to 4.19.90-2201.4.0.0135
kernel-tools-libs-devel - update to 4.19.91-26
python-perf - update to 4.19.91-26
kernel-azure-debuginfo - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-debugsource - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-devel - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-devel-debuginfo - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-syms-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-devel-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-source-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-default-debugsource - update to 5.3.18-59.40.1
kernel-default-livepatch-devel - update to 5.3.18-59.40.1
kernel-default-livepatch - update to 5.3.18-59.40.1
kernel-preempt-extra-debuginfo - update to 5.3.18-59.40.1
kernel-preempt-extra - update to 5.3.18-59.40.1
kernel-preempt-debugsource - update to 5.3.18-59.40.1
kernel-preempt-debuginfo - update to 5.3.18-59.40.1
kernel-default-extra-debuginfo - update to 5.3.18-59.40.1
kernel-default-extra - update to 5.3.18-59.40.1
reiserfs-kmp-default - update to 5.3.18-59.40.1
reiserfs-kmp-default-debuginfo - update to 5.3.18-59.40.1
kernel-obs-build - update to 5.3.18-59.40.1
kernel-obs-build-debugsource - update to 5.3.18-59.40.1
kernel-syms - update to 5.3.18-59.40.1
kernel-preempt-devel - update to 5.3.18-59.40.1
kernel-preempt-devel-debuginfo - update to 5.3.18-59.40.1
kernel-docs - update to 5.3.18-59.40.1
kernel-source - update to 5.3.18-59.40.1
kernel-default-devel - update to 5.3.18-59.40.1
kernel-default-devel-debuginfo - update to 5.3.18-59.40.1
kernel-preempt - update to 5.3.18-59.40.1
kernel-zfcpdump - update to 5.3.18-59.40.1
ocfs2-kmp-default-debuginfo - update to 5.3.18-59.40.1
ocfs2-kmp-default - update to 5.3.18-59.40.1
gfs2-kmp-default-debuginfo - update to 5.3.18-59.40.1
gfs2-kmp-default - update to 5.3.18-59.40.1
dlm-kmp-default-debuginfo - update to 5.3.18-59.40.1
dlm-kmp-default - update to 5.3.18-59.40.1
cluster-md-kmp-default-debuginfo - update to 5.3.18-59.40.1
cluster-md-kmp-default - update to 5.3.18-59.40.1
kernel-zfcpdump-debugsource - update to 5.3.18-59.40.1
kernel-zfcpdump-debuginfo - update to 5.3.18-59.40.1
kernel-macros - update to 5.3.18-59.40.1
kernel-devel - update to 5.3.18-59.40.1
kernel-64kb-devel-debuginfo - update to 5.3.18-59.40.1
kernel-64kb-devel - update to 5.3.18-59.40.1
kernel-64kb-debugsource - update to 5.3.18-59.40.1
kernel-64kb-debuginfo - update to 5.3.18-59.40.1
kernel-64kb - update to 5.3.18-59.40.1
kernel-default - update to 5.3.18-59.40.1
kernel-default-debuginfo - update to 5.3.18-59.40.1
kernel-default-base - update to 5.3.18-59.40.1.18.25.1
kernel-devel-rt - update to 5.3.18-68.1
kernel-rt-devel-debuginfo - update to 5.3.18-68.1
kernel-rt - update to 5.3.18-68.1
kernel-source-rt - update to 5.3.18-68.1
ocfs2-kmp-rt-debuginfo - update to 5.3.18-68.1
ocfs2-kmp-rt - update to 5.3.18-68.1
kernel-syms-rt - update to 5.3.18-68.1
kernel-rt_debug-devel-debuginfo - update to 5.3.18-68.1
kernel-rt_debug-devel - update to 5.3.18-68.1
kernel-rt_debug-debugsource - update to 5.3.18-68.1
kernel-rt_debug-debuginfo - update to 5.3.18-68.1
kernel-rt_debug - update to 5.3.18-68.1
kernel-rt-devel - update to 5.3.18-68.1
kernel-rt-debugsource - update to 5.3.18-68.1
kernel-rt-debuginfo - update to 5.3.18-68.1
gfs2-kmp-rt-debuginfo - update to 5.3.18-68.1
gfs2-kmp-rt - update to 5.3.18-68.1
dlm-kmp-rt-debuginfo - update to 5.3.18-68.1
dlm-kmp-rt - update to 5.3.18-68.1
cluster-md-kmp-rt-debuginfo - update to 5.3.18-68.1
cluster-md-kmp-rt - update to 5.3.18-68.1
IBM Spectrum Virtualize - addressed in versions 8.4.0.10, 8.5.0.7, 8.5.2.3, 8.5.3.0
IBM MQ Appliance - addressed in versions 9.3.0.2, 9.3.1
IBM Spectrum Protect Plus - update to 10.1.11

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba
• https://arxiv.org/pdf/2112.09604.pdf

• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Information disclosure in IBM Elastic Storage System
• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel-rt
• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel
• Multiple vulnerabilities in Oracle VM Server for x86
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.9
• Multiple vulnerabilities in OpenShift Container Platform 4.8
• Multiple vulnerabilties in Red Hat OpenShift Virtualization
• Multiple vulnerabilities in IBM DataPower Gateway
• Information disclosure in IBM Virtualization Management Interface
• Multiple vulnerabilities in IBM MQ Appliance
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• Multiple vulnerabilities in IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
• SUSE update for the Linux Kernel
• openEuler update for kernel
• Multiple vulnerabilities in Migration Toolkit for Containers 1.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for kernel
• Anolis OS update for kernel(ANCK)4.19
• SecurID Authentication Manager update for third-party components