Homepage

Use of a Broken or Risky Cryptographic Algorithm The advisory has been revoked - it doesn't affect any version of package kernel-rt-devel  (opens in a new tab)

Threat Intelligence

EPSS
3.82% (90th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-SLES153-KERNELRTDEVEL-2650401
  • published14 Apr 2022
  • disclosed14 Jan 2022
Report a new vulnerability Found a mistake?

Introduced: 14 Jan 2022

CVE-2021-45485  (opens in a new tab)
CWE-327  (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.3.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-rt-devel package and not the kernel-rt-devel package as distributed by SLES.

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

References