Use of insufficiently random values in Linux kernel - CVE-2021-20322

Vulnerability identifier: #VU63839

CSH Severity: Medium

CVSS v4 BT: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-20322

CWE-ID: CWE-330

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to an error when processing received ICMP errors. A remote attacker can effectively bypass the source port UDP randomization to gain access to sensitive information.

Linux kernel
Debian Linux
Amazon Linux AMI
SUSE CaaS Platform
SUSE MicroOS
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Real Time Extension
SUSE Linux Enterprise Workstation Extension
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Module for Basesystem
Migration Toolkit for Containers
IBM DataPower Gateway
Red Hat Advanced Cluster Management for Kubernetes
IBM Elastic Storage System
IBM Spectrum Protect Plus
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
kernel-livepatch-4_12_14-150_78-default-debuginfo
kernel-livepatch-4_12_14-150_78-default
kernel-livepatch-4_12_14-197_102-default
kgraft-patch-4_4_180-94_150-default
kgraft-patch-4_4_180-94_150-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_22-debugsource
kernel-livepatch-5_3_18-24_96-default-debuginfo
kernel-livepatch-5_3_18-24_96-default
kgraft-patch-4_12_14-95_83-default
kernel-livepatch-5_3_18-59_37-default
kernel-livepatch-SLE15-SP3_Update_10-debugsource
kernel-livepatch-5_3_18-59_37-default-debuginfo
kgraft-patch-4_12_14-122_103-default
kernel-livepatch-SLE15-SP2_Update_21-debugsource
kernel-livepatch-5_3_18-24_93-default-debuginfo
kernel-livepatch-5_3_18-24_93-default
kernel-livepatch-SLE15-SP3_Update_9-debugsource
kernel-livepatch-5_3_18-59_34-default-debuginfo
kernel-livepatch-5_3_18-59_34-default
kernel-livepatch-SLE15-SP3_Update_7-debugsource
kernel-livepatch-5_3_18-59_24-default
kernel-livepatch-5_3_18-59_24-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_19-debugsource
kernel-livepatch-SLE15-SP2_Update_20-debugsource
kernel-livepatch-5_3_18-24_83-default
kernel-livepatch-5_3_18-59_27-default
kernel-livepatch-SLE15-SP3_Update_6-debugsource
kgraft-patch-4_12_14-122_88-default
kgraft-patch-4_12_14-122_91-default
kernel-livepatch-5_3_18-59_27-default-debuginfo
kernel-livepatch-5_3_18-24_83-default-debuginfo
kernel-livepatch-5_3_18-24_86-default
kernel-livepatch-5_3_18-24_86-default-debuginfo
kernel-default-debuginfo
kernel-macros
kernel-default-base
kernel-default
kernel-default-base-debuginfo
kernel-source
kernel-devel
kernel-syms
kernel-default-devel
kernel-default-debugsource
dlm-kmp-default-debuginfo
dlm-kmp-default
gfs2-kmp-default
gfs2-kmp-default-debuginfo
ocfs2-kmp-default
ocfs2-kmp-default-debuginfo
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-default-man
kernel-default-kgraft
kernel-rt-debugsource
kernel-devel-rt
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-source-rt
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-rt-devel-debuginfo
kernel-rt-devel
kernel-rt-debuginfo
kernel-rt-base-debuginfo
kernel-rt-base
kernel-rt
gfs2-kmp-rt-debuginfo
gfs2-kmp-rt
dlm-kmp-rt-debuginfo
dlm-kmp-rt
cluster-md-kmp-rt-debuginfo
cluster-md-kmp-rt
kernel-azure-debugsource
kernel-source-azure
kernel-azure-debuginfo
kernel-devel-azure
kernel-syms-azure
kernel-azure-devel
kernel-azure-base-debuginfo
kernel-azure-base
kernel-azure
kernel-default-devel-debuginfo
kernel-default-kgraft-devel
kernel-docs
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-vanilla-base
kernel-vanilla-base-debuginfo
kernel-vanilla-debuginfo
kernel-vanilla-debugsource
reiserfs-kmp-default
reiserfs-kmp-default-debuginfo
kernel-zfcpdump-debuginfo
kernel-zfcpdump-debugsource
kernel-default-livepatch
kernel-default-livepatch-devel
kernel
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-4.15.0-167-lowlatency (Ubuntu package)
linux-image-4.15.0-167-generic-lpae (Ubuntu package)
linux-image-4.15.0-167-generic (Ubuntu package)
linux-image-lowlatency-hwe-16.04-edge (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1034-dell300x (Ubuntu package)
linux-image-4.15.0-1086-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1102-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1106-kvm (Ubuntu package)
linux-image-4.15.0-1115-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1119-snapdragon (Ubuntu package)
linux-image-4.15.0-1130-azure (Ubuntu package)
bpftool
python3-perf
kernel-core
kernel-cross-headers
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-headers
kernel-modules
kernel-modules-extra
kernel-tools
kernel-tools-libs
perf
kernel-abi-stablelists
kernel-doc
python-perf
kernel-tools-libs-devel
linux (Debian package)
kgraft-patch-4_12_14-122_83-default
kernel-livepatch-SLE15-SP2_Update_18-debugsource
kernel-livepatch-5_3_18-24_78-default-debuginfo
kernel-livepatch-5_3_18-24_78-default
kernel-livepatch-SLE15-SP3_Update_5-debugsource
kernel-livepatch-5_3_18-59_19-default-debuginfo
kernel-livepatch-5_3_18-59_19-default
kernel-azure-devel-debuginfo
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-preempt-devel
kernel-preempt-devel-debuginfo
kernel-preempt
kernel-preempt-extra-debuginfo
kernel-preempt-extra
kernel-zfcpdump
kernel-64kb-devel-debuginfo
kernel-64kb-devel
kernel-64kb-debugsource
kernel-64kb-debuginfo
kernel-64kb
linux-image-oem (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-gcp (Ubuntu package)
kernel-livepatch-5_3_18-24_75-default
kernel-livepatch-4_12_14-197_99-default
kernel-livepatch-5_3_18-24_75-default-debuginfo
kernel-livepatch-4_12_14-150_75-default-debuginfo
kernel-livepatch-SLE15-SP3_Update_4-debugsource
kernel-livepatch-4_12_14-150_75-default
kernel-livepatch-SLE15-SP2_Update_17-debugsource
kgraft-patch-4_12_14-122_80-default
kernel-livepatch-5_3_18-59_16-default-debuginfo
kgraft-patch-4_4_180-94_147-default
kgraft-patch-4_4_180-94_147-default-debuginfo
kgraft-patch-4_12_14-95_80-default
kernel-livepatch-5_3_18-59_16-default
kernel-livepatch-5_3_18-59_10-default-debuginfo
kernel-livepatch-5_3_18-24_67-default
kernel-livepatch-5_3_18-24_67-default-debuginfo
kernel-livepatch-5_3_18-24_70-default
kernel-livepatch-5_3_18-24_70-default-debuginfo
kernel-livepatch-5_3_18-59_13-default-debuginfo
kernel-livepatch-5_3_18-59_13-default
kgraft-patch-4_12_14-122_77-default
kernel-livepatch-5_3_18-59_10-default
kernel-livepatch-5_3_18-24_53_4-default
kernel-livepatch-5_3_18-24_53_4-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_16-debugsource
kernel-livepatch-SLE15-SP2_Update_14-debugsource
kernel-livepatch-SLE15-SP2_Update_15-debugsource
kernel-livepatch-SLE15-SP3_Update_3-debugsource
kernel-livepatch-5_3_18-59_5-default
kgraft-patch-4_12_14-122_74-default
kernel-livepatch-5_3_18-59_5-default-debuginfo
kernel-livepatch-SLE15-SP3_Update_1-debugsource
kernel-livepatch-SLE15-SP3_Update_2-debugsource
kgraft-patch-4_12_14-95_77-default
kernel-livepatch-4_12_14-197_92-default
kernel-livepatch-4_12_14-150_72-default
kernel-livepatch-4_12_14-150_72-default-debuginfo
kgraft-patch-4_12_14-95_74-default
kernel-livepatch-4_12_14-197_89-default
kernel-livepatch-5_3_18-24_61-default
kernel-livepatch-5_3_18-24_61-default-debuginfo
kernel-livepatch-5_3_18-24_64-default
kgraft-patch-4_4_180-94_144-default-debuginfo
kgraft-patch-4_4_180-94_144-default
kgraft-patch-4_12_14-122_71-default
kernel-livepatch-SLE15-SP2_Update_13-debugsource
kernel-livepatch-SLE15-SP2_Update_12-debugsource
kernel-livepatch-5_3_18-24_64-default-debuginfo
kernel-livepatch-SLE15-SP3_Update_0-debugsource
kernel-livepatch-5_3_18-57-default-debuginfo
kernel-livepatch-5_3_18-57-default
kgraft-patch-4_12_14-122_66-default
kernel-livepatch-5_3_18-24_52-default
kernel-livepatch-4_12_14-197_86-default
kernel-livepatch-4_12_14-150_69-default
kernel-livepatch-4_12_14-150_69-default-debuginfo
kernel-livepatch-5_3_18-24_52-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_11-debugsource
kgraft-patch-4_12_14-122_63-default
kgraft-patch-4_4_180-94_141-default-debuginfo
kgraft-patch-4_4_180-94_141-default
kgraft-patch-4_12_14-95_71-default
kgraft-patch-4_4_180-94_138-default-debuginfo
kernel-livepatch-5_3_18-24_49-default-debuginfo
kernel-livepatch-5_3_18-24_49-default
kernel-livepatch-SLE15-SP2_Update_10-debugsource
kgraft-patch-4_12_14-95_68-default
kgraft-patch-4_12_14-122_60-default
kgraft-patch-4_4_180-94_138-default
kernel-livepatch-4_12_14-150_66-default-debuginfo
kernel-livepatch-4_12_14-150_66-default
kernel-livepatch-4_12_14-197_83-default
kernel-livepatch-SLE15-SP2_Update_8-debugsource
kernel-livepatch-4_12_14-197_78-default
kernel-livepatch-5_3_18-24_46-default-debuginfo
kernel-livepatch-5_3_18-24_46-default
kernel-livepatch-5_3_18-24_43-default-debuginfo
kernel-livepatch-5_3_18-24_43-default
kernel-livepatch-SLE15-SP2_Update_9-debugsource
kernel-livepatch-4_12_14-197_75-default
kgraft-patch-4_12_14-122_57-default
kgraft-patch-4_12_14-122_54-default

Install updates from vendor's website.

Linux kernel - update to 5.15 rc1
Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
kernel (Red Hat package) - addressed in versions 4.18.0-305.49.1.el8_4, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 4.18.0-305.49.1.rt7.121.el8_4, 4.18.0-372.9.1.rt7.166.el8
IBM Elastic Storage System - update to 6.1.4.0
IBM DataPower Gateway - update to 10.5.0.3
kernel-livepatch-4_12_14-150_78-default-debuginfo - update to 1-1.3.1
kernel-livepatch-4_12_14-150_78-default - update to 1-1.3.1
kernel-livepatch-4_12_14-197_102-default - update to 1-3.3.1
kgraft-patch-4_4_180-94_150-default - update to 1-4.3.1
kgraft-patch-4_4_180-94_150-default-debuginfo - update to 1-4.3.1
kernel-livepatch-SLE15-SP2_Update_22-debugsource - update to 1-5.3.1
kernel-livepatch-5_3_18-24_96-default-debuginfo - update to 1-5.3.1
kernel-livepatch-5_3_18-24_96-default - update to 1-5.3.1
kgraft-patch-4_12_14-95_83-default - update to 1-6.3.1
kernel-livepatch-5_3_18-59_37-default - update to 1-7.3.2
kernel-livepatch-SLE15-SP3_Update_10-debugsource - update to 1-7.3.2
kernel-livepatch-5_3_18-59_37-default-debuginfo - update to 1-7.3.2
kgraft-patch-4_12_14-122_103-default - update to 1-8.5.1
kernel-livepatch-SLE15-SP2_Update_21-debugsource - update to 2-2.1
kernel-livepatch-5_3_18-24_93-default-debuginfo - update to 2-2.1
kernel-livepatch-5_3_18-24_93-default - update to 2-2.1
kernel-livepatch-SLE15-SP3_Update_9-debugsource - update to 2-2.1
kernel-livepatch-5_3_18-59_34-default-debuginfo - update to 2-2.1
kernel-livepatch-5_3_18-59_34-default - update to 2-2.1
kernel-livepatch-SLE15-SP3_Update_7-debugsource - update to 3-2.1
kernel-livepatch-5_3_18-59_24-default - update to 3-2.1
kernel-livepatch-5_3_18-59_24-default-debuginfo - update to 3-2.1
kernel-livepatch-SLE15-SP2_Update_19-debugsource - update to 3-2.1
kernel-livepatch-SLE15-SP2_Update_20-debugsource - update to 3-2.1
kernel-livepatch-5_3_18-24_83-default - update to 3-2.1
kernel-livepatch-5_3_18-59_27-default - update to 3-2.1
kernel-livepatch-SLE15-SP3_Update_6-debugsource - update to 3-2.1
kgraft-patch-4_12_14-122_88-default - update to 3-2.1
kgraft-patch-4_12_14-122_91-default - update to 3-2.1
kernel-livepatch-5_3_18-59_27-default-debuginfo - update to 3-2.1
kernel-livepatch-5_3_18-24_83-default-debuginfo - update to 3-2.1
kernel-livepatch-5_3_18-24_86-default - update to 3-2.1
kernel-livepatch-5_3_18-24_86-default-debuginfo - update to 3-2.1
kernel-default-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-macros - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-base - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1.9.44.1, 5.3.18-59.37.2.18.23.3
kernel-default - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-197.102.2
kernel-source - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-syms - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.1
kernel-default-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-debugsource - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
dlm-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
dlm-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
gfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
gfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
ocfs2-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
cluster-md-kmp-default - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-man - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2
kernel-default-kgraft - addressed in versions 4.4.180-94.150.1, 4.12.14-95.83.2, 4.12.14-122.103.1
kernel-rt-debugsource - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-devel-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
ocfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
ocfs2-kmp-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-syms-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.1, 5.3.18-65.1
kernel-rt_debug-devel-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
kernel-rt_debug-devel - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
kernel-rt_debug-debugsource - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
kernel-source-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
kernel-rt_debug-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3, 5.3.18-65.2
kernel-rt_debug - addressed in versions 4.12.14-10.70.2, 5.3.18-62.3
kernel-rt-devel-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-rt-devel - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-rt-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-rt-base-debuginfo - update to 4.12.14-10.70.2
kernel-rt-base - update to 4.12.14-10.70.2
kernel-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
gfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
gfs2-kmp-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
dlm-kmp-rt-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
dlm-kmp-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
cluster-md-kmp-rt-debuginfo - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
cluster-md-kmp-rt - addressed in versions 4.12.14-10.70.2, 5.3.18-62.2, 5.3.18-65.2
kernel-azure-debugsource - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-source-azure - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-azure-debuginfo - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-devel-azure - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-syms-azure - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-azure-devel - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-azure-base-debuginfo - update to 4.12.14-16.80.1
kernel-azure-base - update to 4.12.14-16.80.1
kernel-azure - addressed in versions 4.12.14-16.80.1, 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-default-devel-debuginfo - addressed in versions 4.12.14-95.83.2, 4.12.14-122.103.1, 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-kgraft-devel - addressed in versions 4.12.14-95.83.2, 4.12.14-122.103.1
kernel-docs - addressed in versions 4.12.14-122.103.1, 4.12.14-150.78.2, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-obs-build-debugsource - addressed in versions 4.12.14-122.103.1, 4.12.14-150.78.2, 4.12.14-197.102.1, 5.3.18-24.96.1, 5.3.18-59.37.3
kernel-obs-build - addressed in versions 4.12.14-122.103.1, 4.12.14-150.78.2, 4.12.14-197.102.1, 5.3.18-24.96.1, 5.3.18-59.37.3
kernel-default-extra-debuginfo - addressed in versions 4.12.14-122.103.1, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-extra - addressed in versions 4.12.14-122.103.1, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-vanilla-base - update to 4.12.14-150.78.1
kernel-vanilla-base-debuginfo - update to 4.12.14-150.78.1
kernel-vanilla-debuginfo - update to 4.12.14-150.78.1
kernel-vanilla-debugsource - update to 4.12.14-150.78.1
reiserfs-kmp-default - addressed in versions 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
reiserfs-kmp-default-debuginfo - addressed in versions 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-zfcpdump-debuginfo - addressed in versions 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-59.37.2
kernel-zfcpdump-debugsource - addressed in versions 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-59.37.2
kernel-default-livepatch - addressed in versions 4.12.14-150.78.1, 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-default-livepatch-devel - addressed in versions 4.12.14-197.102.2, 5.3.18-24.96.1, 5.3.18-59.37.2
kernel - addressed in versions 4.14.262-135.486, 4.14.262-135.489
linux-image-generic (Ubuntu package) - update to 4.15.0.167.156
linux-image-generic-lpae (Ubuntu package) - update to 4.15.0.167.156
linux-image-lowlatency (Ubuntu package) - update to 4.15.0.167.156
linux-image-virtual (Ubuntu package) - update to 4.15.0.167.156
linux-image-4.15.0-167-lowlatency (Ubuntu package) - update to 4.15.0-167.175
linux-image-4.15.0-167-generic-lpae (Ubuntu package) - update to 4.15.0-167.175
linux-image-4.15.0-167-generic (Ubuntu package) - update to 4.15.0-167.175
linux-image-lowlatency-hwe-16.04-edge (Ubuntu package) - update to 4.15.0.187.173
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.187.173
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.187.173
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.187.173
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1034.36
linux-image-4.15.0-1034-dell300x (Ubuntu package) - update to 4.15.0-1034.39
linux-image-4.15.0-1086-oracle (Ubuntu package) - update to 4.15.0-1086.94
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1086.96
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1099.92
linux-image-raspi2 (Ubuntu package) - update to 4.15.0.1102.100
linux-image-4.15.0-1102-raspi2 (Ubuntu package) - update to 4.15.0-1102.109
linux-image-kvm (Ubuntu package) - update to 4.15.0.1106.102
linux-image-4.15.0-1106-kvm (Ubuntu package) - update to 4.15.0-1106.108
linux-image-4.15.0-1115-gcp (Ubuntu package) - update to 4.15.0-1115.129
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1115.134
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1119.122
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1119.122
linux-image-4.15.0-1119-snapdragon (Ubuntu package) - update to 4.15.0-1119.128
linux-image-4.15.0-1130-azure (Ubuntu package) - update to 4.15.0-1130.143
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-26
python3-perf - update to 4.18.0-372.9.1
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-core - update to 4.18.0-372.9.1
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-debug-core - update to 4.18.0-372.9.1
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-debug-modules - update to 4.18.0-372.9.1
kernel-debug-modules-extra - update to 4.18.0-372.9.1
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-modules - update to 4.18.0-372.9.1
kernel-modules-extra - update to 4.18.0-372.9.1
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-26
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-26
kernel-abi-stablelists - update to 4.18.0-372.9.1
kernel-doc - update to 4.18.0-372.9.1
python-perf - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
linux (Debian package) - update to 4.19.232-1
kgraft-patch-4_12_14-122_83-default - update to 5-2.1
kernel-livepatch-SLE15-SP2_Update_18-debugsource - update to 5-2.1
kernel-livepatch-5_3_18-24_78-default-debuginfo - update to 5-2.1
kernel-livepatch-5_3_18-24_78-default - update to 5-2.1
kernel-livepatch-SLE15-SP3_Update_5-debugsource - update to 5-2.1
kernel-livepatch-5_3_18-59_19-default-debuginfo - update to 5-2.1
kernel-livepatch-5_3_18-59_19-default - update to 5-2.1
kernel-azure-devel-debuginfo - addressed in versions 5.3.18-18.75.1, 5.3.18-38.31.1
kernel-preempt-debugsource - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt-debuginfo - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt-devel - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt-devel-debuginfo - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt-extra-debuginfo - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-preempt-extra - addressed in versions 5.3.18-24.96.1, 5.3.18-59.37.2
kernel-zfcpdump - update to 5.3.18-59.37.2
kernel-64kb-devel-debuginfo - update to 5.3.18-59.37.2
kernel-64kb-devel - update to 5.3.18-59.37.2
kernel-64kb-debugsource - update to 5.3.18-59.37.2
kernel-64kb-debuginfo - update to 5.3.18-59.37.2
kernel-64kb - update to 5.3.18-59.37.2
linux-image-oem (Ubuntu package) - update to 5.4.0.96.100
linux-image-gke (Ubuntu package) - update to 5.4.0.1059.69
linux-image-oracle (Ubuntu package) - update to 5.11.0.1027.30~20.04.19
linux-image-azure (Ubuntu package) - update to 5.11.0.1027.30~20.04.25
linux-image-gcp (Ubuntu package) - update to 5.11.0.1028.32~20.04.26
kernel-livepatch-5_3_18-24_75-default - update to 6-2.1
kernel-livepatch-4_12_14-197_99-default - update to 6-2.1
kernel-livepatch-5_3_18-24_75-default-debuginfo - update to 6-2.1
kernel-livepatch-4_12_14-150_75-default-debuginfo - update to 6-2.1
kernel-livepatch-SLE15-SP3_Update_4-debugsource - update to 6-2.1
kernel-livepatch-4_12_14-150_75-default - update to 6-2.1
kernel-livepatch-SLE15-SP2_Update_17-debugsource - update to 6-2.1
kgraft-patch-4_12_14-122_80-default - update to 6-2.1
kernel-livepatch-5_3_18-59_16-default-debuginfo - update to 6-2.1
kgraft-patch-4_4_180-94_147-default - update to 6-2.1
kgraft-patch-4_4_180-94_147-default-debuginfo - update to 6-2.1
kgraft-patch-4_12_14-95_80-default - update to 6-2.1
kernel-livepatch-5_3_18-59_16-default - update to 6-2.1
kernel-livepatch-5_3_18-59_10-default-debuginfo - update to 7-2.1
kernel-livepatch-5_3_18-24_67-default - update to 7-2.1
kernel-livepatch-5_3_18-24_67-default-debuginfo - update to 7-2.1
kernel-livepatch-5_3_18-24_70-default - update to 7-2.1
kernel-livepatch-5_3_18-24_70-default-debuginfo - update to 7-2.1
kernel-livepatch-5_3_18-59_13-default-debuginfo - update to 7-2.1
kernel-livepatch-5_3_18-59_13-default - update to 7-2.1
kgraft-patch-4_12_14-122_77-default - update to 7-2.1
kernel-livepatch-5_3_18-59_10-default - update to 7-2.1
kernel-livepatch-5_3_18-24_53_4-default - update to 7-2.1
kernel-livepatch-5_3_18-24_53_4-default-debuginfo - update to 7-2.1
kernel-livepatch-SLE15-SP2_Update_16-debugsource - update to 7-2.1
kernel-livepatch-SLE15-SP2_Update_14-debugsource - update to 7-2.1
kernel-livepatch-SLE15-SP2_Update_15-debugsource - update to 7-2.1
kernel-livepatch-SLE15-SP3_Update_3-debugsource - update to 7-2.1
kernel-livepatch-5_3_18-59_5-default - update to 7-2.1
kgraft-patch-4_12_14-122_74-default - update to 7-2.1
kernel-livepatch-5_3_18-59_5-default-debuginfo - update to 7-2.1
kernel-livepatch-SLE15-SP3_Update_1-debugsource - update to 7-2.1
kernel-livepatch-SLE15-SP3_Update_2-debugsource - update to 7-2.1
kgraft-patch-4_12_14-95_77-default - update to 8-2.1
kernel-livepatch-4_12_14-197_92-default - update to 8-2.1
kernel-livepatch-4_12_14-150_72-default - update to 9-2.1
kernel-livepatch-4_12_14-150_72-default-debuginfo - update to 9-2.1
kgraft-patch-4_12_14-95_74-default - update to 9-2.1
kernel-livepatch-4_12_14-197_89-default - update to 9-2.1
kernel-livepatch-5_3_18-24_61-default - update to 9-2.1
kernel-livepatch-5_3_18-24_61-default-debuginfo - update to 9-2.1
kernel-livepatch-5_3_18-24_64-default - update to 9-2.1
kgraft-patch-4_4_180-94_144-default-debuginfo - update to 9-2.1
kgraft-patch-4_4_180-94_144-default - update to 9-2.1
kgraft-patch-4_12_14-122_71-default - update to 9-2.1
kernel-livepatch-SLE15-SP2_Update_13-debugsource - update to 9-2.1
kernel-livepatch-SLE15-SP2_Update_12-debugsource - update to 9-2.1
kernel-livepatch-5_3_18-24_64-default-debuginfo - update to 9-2.1
kernel-livepatch-SLE15-SP3_Update_0-debugsource - update to 9-3.1
kernel-livepatch-5_3_18-57-default-debuginfo - update to 9-3.1
kernel-livepatch-5_3_18-57-default - update to 9-3.1
IBM Spectrum Protect Plus - update to 10.1.11
kgraft-patch-4_12_14-122_66-default - update to 10-2.1
kernel-livepatch-5_3_18-24_52-default - update to 12-2.2
kernel-livepatch-4_12_14-197_86-default - update to 12-2.2
kernel-livepatch-4_12_14-150_69-default - update to 12-2.2
kernel-livepatch-4_12_14-150_69-default-debuginfo - update to 12-2.2
kernel-livepatch-5_3_18-24_52-default-debuginfo - update to 12-2.2
kernel-livepatch-SLE15-SP2_Update_11-debugsource - update to 12-2.2
kgraft-patch-4_12_14-122_63-default - update to 12-2.2
kgraft-patch-4_4_180-94_141-default-debuginfo - update to 12-2.2
kgraft-patch-4_4_180-94_141-default - update to 12-2.2
kgraft-patch-4_12_14-95_71-default - update to 12-2.2
kgraft-patch-4_4_180-94_138-default-debuginfo - update to 13-2.2
kernel-livepatch-5_3_18-24_49-default-debuginfo - update to 13-2.2
kernel-livepatch-5_3_18-24_49-default - update to 13-2.2
kernel-livepatch-SLE15-SP2_Update_10-debugsource - update to 13-2.2
kgraft-patch-4_12_14-95_68-default - update to 13-2.2
kgraft-patch-4_12_14-122_60-default - update to 13-2.2
kgraft-patch-4_4_180-94_138-default - update to 13-2.2
kernel-livepatch-4_12_14-150_66-default-debuginfo - update to 13-2.2
kernel-livepatch-4_12_14-150_66-default - update to 13-2.2
kernel-livepatch-4_12_14-197_83-default - update to 13-2.2
kernel-livepatch-SLE15-SP2_Update_8-debugsource - update to 14-2.2
kernel-livepatch-4_12_14-197_78-default - update to 14-2.2
kernel-livepatch-5_3_18-24_46-default-debuginfo - update to 14-2.2
kernel-livepatch-5_3_18-24_46-default - update to 14-2.2
kernel-livepatch-5_3_18-24_43-default-debuginfo - update to 14-2.2
kernel-livepatch-5_3_18-24_43-default - update to 14-2.2
kernel-livepatch-SLE15-SP2_Update_9-debugsource - update to 14-2.2
kernel-livepatch-4_12_14-197_75-default - update to 14-2.2
kgraft-patch-4_12_14-122_57-default - update to 14-2.2
kgraft-patch-4_12_14-122_54-default - update to 14-2.2

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/route.c?h=v5.15-rc6&id=67d6d681e15b578c1725bad8ad079e05d1c48a8e
• https://bugzilla.redhat.com/show_bug.cgi?id=2014230
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=4785305c05b25a242e5314cc821f54ade4c18810
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/route.c?h=v5.15-rc6&id=a00df2caffed3883c341d5685f830434312e4a43
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=6457378fe796815c973f631a1904e147d6ee33b1
• https://security.netapp.com/advisory/ntap-20220303-0002/
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
• https://www.debian.org/security/2022/dsa-5096

• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel-rt
• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel
• SUSE update for the Linux Kernel (Live Patch 37 for SLE 12 SP3)
• SUSE update for the Linux Kernel (Live Patch 6 for SLE 15 SP3)
• Ubuntu update for linux
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Debian update for linux
• Multiple vulnerabilities in IBM Elastic Storage System
• Multiple vulnerabilities in IBM DataPower Gateway
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• Amazon Linux AMI update for kernel
• SUSE update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)
• SUSE update for the Linux Kernel (Live Patch 15 for SLE 15 SP2)
• SUSE update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
• Amazon Linux AMI update for kernel
• Multiple vulnerabilities in Migration Toolkit for Containers 1.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux RT Kernel
• SUSE update for the Linux RT Kernel
• SUSE update for the Linux RT Kernel
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for kernel
• Anolis OS update for kernel(ANCK)4.19
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel