Information disclosure in Linux kernel - CVE-2021-45485

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63668

Information disclosure in Linux kernel - CVE-2021-45485

Published: May 25, 2022 / Updated: May 25, 2022


Vulnerability identifier: #VU63668
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-45485
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to an error in the IPv6 implementation in the Linux kernel. A remote attacker can gain access to sensitive information.


Affected software

Linux kernel
SUSE Linux Enterprise Micro
SUSE MicroOS
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Ubuntu
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Module for Public Cloud
openEuler
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM DataPower Gateway
Red Hat Advanced Cluster Management for Kubernetes
IBM Elastic Storage System
IBM Spectrum Protect Plus
OpenShift Virtualization
IBM Spectrum Virtualize
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel-livepatch-5_3_18-59_40-default
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.4.0-219-generic (Ubuntu package)
linux-image-4.4.0-1135-aws (Ubuntu package)
linux-image-4.4.0-1100-kvm (Ubuntu package)
linux-image-4.4.0-1099-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-219-lowlatency (Ubuntu package)
kernel-debug-modules-extra
kernel-devel
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
perf
python3-perf
kernel-abi-stablelists
kernel-doc
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
bpftool
bpftool-debuginfo
python3-perf-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
python2-perf-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-source
python2-perf
perf-debuginfo
kernel-tools-libs-devel
python-perf
kernel-devel-azure
kernel-source-azure
kernel-syms-azure
kernel-azure-devel-debuginfo
kernel-azure-debugsource
kernel-azure-debuginfo
kernel-azure-devel
kernel-azure
kernel-default
kernel-default-debuginfo
kernel-default-debugsource
kernel-default-extra
kernel-default-extra-debuginfo
kernel-preempt-debuginfo
kernel-preempt-debugsource
kernel-preempt-extra
kernel-docs
kernel-preempt-extra-debuginfo
kernel-default-livepatch
kernel-default-livepatch-devel
kernel-preempt-devel-debuginfo
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-obs-build
kernel-obs-build-debugsource
kernel-syms
kernel-preempt-devel
kernel-default-devel-debuginfo
ocfs2-kmp-default
ocfs2-kmp-default-debuginfo
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
kernel-zfcpdump
kernel-macros
kernel-64kb-devel-debuginfo
kernel-64kb-devel
kernel-64kb-debugsource
kernel-64kb-debuginfo
kernel-64kb
kernel-preempt
kernel-default-devel
kernel-default-base
kernel-rt-devel-debuginfo
kernel-rt-devel
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-devel-rt
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-source-rt
SecurID Authentication Manager
IBM Hardware Management Console
IBM MQ Appliance

How to mitigate CVE-2021-45485

Install updates from vendor's website.

Linux kernel - update to 5.13.3
Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
Red Hat OpenShift Container Platform - addressed in versions 4.8.53, 4.9.51, 4.10.39
OpenShift Virtualization - update to 4.9.7
kernel (Red Hat package) - addressed in versions 4.18.0-305.65.1.el8_4, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 4.18.0-305.65.1.rt7.137.el8_4, 4.18.0-372.9.1.rt7.166.el8
IBM Elastic Storage System - update to 6.1.4.0
SecurID Authentication Manager - update to 8.6 Patch 3
IBM DataPower Gateway - update to 10.5.0.3
kernel-livepatch-5_3_18-59_40-default - update to 1-7.3.1
linux-image-generic (Ubuntu package) - update to 4.4.0.219.226
linux-image-virtual (Ubuntu package) - update to 4.4.0.219.226
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-lowlatency (Ubuntu package) - update to 4.4.0.219.226
linux-image-kvm (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-219-generic (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1135-aws (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1100-kvm (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1099-aws (Ubuntu package) - update to 4.4.0.219.226
linux-image-aws (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-219-lowlatency (Ubuntu package) - update to 4.4.0.219.226
kernel-debug-modules-extra - update to 4.18.0-372.9.1
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-modules - update to 4.18.0-372.9.1
kernel-modules-extra - update to 4.18.0-372.9.1
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-26
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-26
python3-perf - update to 4.18.0-372.9.1
kernel-abi-stablelists - update to 4.18.0-372.9.1
kernel-doc - update to 4.18.0-372.9.1
kernel-debug-modules - update to 4.18.0-372.9.1
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-debug-core - update to 4.18.0-372.9.1
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-core - update to 4.18.0-372.9.1
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-26
bpftool-debuginfo - update to 4.19.90-2201.4.0.0135
python3-perf-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools-devel - update to 4.19.90-2201.4.0.0135
python2-perf-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools - update to 4.19.90-2201.4.0.0135
kernel-debuginfo - update to 4.19.90-2201.4.0.0135
python3-perf - update to 4.19.90-2201.4.0.0135
kernel-devel - update to 4.19.90-2201.4.0.0135
kernel-debugsource - update to 4.19.90-2201.4.0.0135
kernel-source - update to 4.19.90-2201.4.0.0135
perf - update to 4.19.90-2201.4.0.0135
python2-perf - update to 4.19.90-2201.4.0.0135
bpftool - update to 4.19.90-2201.4.0.0135
kernel - update to 4.19.90-2201.4.0.0135
perf-debuginfo - update to 4.19.90-2201.4.0.0135
kernel-tools-libs-devel - update to 4.19.91-26
python-perf - update to 4.19.91-26
kernel-devel-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-source-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-syms-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-devel-debuginfo - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-debugsource - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-debuginfo - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure-devel - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-azure - addressed in versions 5.3.18-38.34.1, 5.3.18-150300.38.37.1
kernel-default - update to 5.3.18-59.40.1
kernel-default-debuginfo - update to 5.3.18-59.40.1
kernel-default-debugsource - update to 5.3.18-59.40.1
kernel-default-extra - update to 5.3.18-59.40.1
kernel-default-extra-debuginfo - update to 5.3.18-59.40.1
kernel-preempt-debuginfo - update to 5.3.18-59.40.1
kernel-preempt-debugsource - update to 5.3.18-59.40.1
kernel-preempt-extra - update to 5.3.18-59.40.1
kernel-docs - update to 5.3.18-59.40.1
kernel-preempt-extra-debuginfo - update to 5.3.18-59.40.1
kernel-default-livepatch - update to 5.3.18-59.40.1
kernel-default-livepatch-devel - update to 5.3.18-59.40.1
kernel-preempt-devel-debuginfo - update to 5.3.18-59.40.1
reiserfs-kmp-default - update to 5.3.18-59.40.1
reiserfs-kmp-default-debuginfo - update to 5.3.18-59.40.1
kernel-obs-build - update to 5.3.18-59.40.1
kernel-obs-build-debugsource - update to 5.3.18-59.40.1
kernel-syms - update to 5.3.18-59.40.1
kernel-preempt-devel - update to 5.3.18-59.40.1
kernel-source - update to 5.3.18-59.40.1
kernel-default-devel-debuginfo - update to 5.3.18-59.40.1
ocfs2-kmp-default - update to 5.3.18-59.40.1
ocfs2-kmp-default-debuginfo - update to 5.3.18-59.40.1
gfs2-kmp-default-debuginfo - update to 5.3.18-59.40.1
gfs2-kmp-default - update to 5.3.18-59.40.1
dlm-kmp-default-debuginfo - update to 5.3.18-59.40.1
dlm-kmp-default - update to 5.3.18-59.40.1
cluster-md-kmp-default-debuginfo - update to 5.3.18-59.40.1
cluster-md-kmp-default - update to 5.3.18-59.40.1
kernel-zfcpdump-debugsource - update to 5.3.18-59.40.1
kernel-zfcpdump-debuginfo - update to 5.3.18-59.40.1
kernel-zfcpdump - update to 5.3.18-59.40.1
kernel-macros - update to 5.3.18-59.40.1
kernel-devel - update to 5.3.18-59.40.1
kernel-64kb-devel-debuginfo - update to 5.3.18-59.40.1
kernel-64kb-devel - update to 5.3.18-59.40.1
kernel-64kb-debugsource - update to 5.3.18-59.40.1
kernel-64kb-debuginfo - update to 5.3.18-59.40.1
kernel-64kb - update to 5.3.18-59.40.1
kernel-preempt - update to 5.3.18-59.40.1
kernel-default-devel - update to 5.3.18-59.40.1
kernel-default-base - update to 5.3.18-59.40.1.18.25.1
kernel-rt-devel-debuginfo - update to 5.3.18-68.1
kernel-rt-devel - update to 5.3.18-68.1
ocfs2-kmp-rt-debuginfo - update to 5.3.18-68.1
ocfs2-kmp-rt - update to 5.3.18-68.1
kernel-syms-rt - update to 5.3.18-68.1
kernel-rt_debug-devel-debuginfo - update to 5.3.18-68.1
kernel-rt_debug-devel - update to 5.3.18-68.1
kernel-rt_debug-debugsource - update to 5.3.18-68.1
kernel-rt_debug-debuginfo - update to 5.3.18-68.1
kernel-rt_debug - update to 5.3.18-68.1
kernel-devel-rt - update to 5.3.18-68.1
kernel-rt-debugsource - update to 5.3.18-68.1
kernel-rt-debuginfo - update to 5.3.18-68.1
kernel-rt - update to 5.3.18-68.1
gfs2-kmp-rt-debuginfo - update to 5.3.18-68.1
gfs2-kmp-rt - update to 5.3.18-68.1
dlm-kmp-rt-debuginfo - update to 5.3.18-68.1
dlm-kmp-rt - update to 5.3.18-68.1
cluster-md-kmp-rt-debuginfo - update to 5.3.18-68.1
cluster-md-kmp-rt - update to 5.3.18-68.1
kernel-source-rt - update to 5.3.18-68.1
IBM Spectrum Virtualize - addressed in versions 8.4.0.10, 8.5.0.7, 8.5.2.3, 8.5.3.0
IBM Hardware Management Console - addressed in versions 9.2.950.0 SP3 ppc, 10.1.1020.0 SP1 ppc, 10.1.1020.0 SP1 x86
IBM MQ Appliance - addressed in versions 9.3.0.2, 9.3.1
IBM Spectrum Protect Plus - update to 10.1.11

External References

Related Security Bulletins