CVE-2021-20322: linux kernel +20 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2021-20322

CVSS 7.4 · High EPSS 6,9%

Kerentanan Use of Insufficiently Random Values pada linux kernel, fedoraproject fedora +19 lainnya. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

Rincian

Terbit di NVD: 18 Februari 2022
Terakhir diubah: 30 Juli 2026
Status NVD: Analyzed
CVSS 3.1: 7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-330: Use of Insufficiently Random Values
EPSS (30 hari): 6,9% peluang dieksploitasi; lebih tinggi dari 93,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 4.15 hingga sebelum 4.19.215
linux	linux kernel	Versi 4.20 hingga sebelum 5.4.157
linux	linux kernel	Versi 5.5 hingga sebelum 5.10.62
linux	linux kernel	Versi 5.11 hingga sebelum 5.13.14
fedoraproject	fedora	Versi 34
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
netapp	active iq unified manager	Semua versi
netapp	e-series santricity os controller	Versi 11.0 hingga 11.70.1
netapp	solidfire, enterprise sds & hci storage node	Semua versi
netapp	solidfire & hci management node	Semua versi
netapp	fas baseboard management controller firmware	Semua versi
netapp	aff baseboard management controller firmware	Semua versi
netapp	aff a700s firmware	Semua versi
netapp	h700s firmware	Semua versi
netapp	h700e firmware	Semua versi
netapp	h500s firmware	Semua versi
netapp	h410s firmware	Semua versi
netapp	h500e firmware	Semua versi
netapp	h300e firmware	Semua versi
netapp	h300s firmware	Semua versi
netapp	hci compute node firmware	Semua versi
oracle	communications cloud native core binding support function	Versi 22.1.3
oracle	communications cloud native core network exposure function	Versi 22.1.1
oracle	communications cloud native core policy	Versi 22.2.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=4785305c05b25a242e53... mailing list · patch · advisory vendor
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.15-rc6&id=6457378fe796815c973f... mailing list · patch · advisory vendor
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv4/route.c?h=v5.15-rc6&id=67d6... mailing list · patch · advisory vendor
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/route.c?h=v5.15-rc6&id=a00d... mailing list · patch · advisory vendor
https://bugzilla.redhat.com/show_bug.cgi?id=2014230 issue tracking · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html mailing list · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20220303-0002/ advisory pihak ketiga
https://www.debian.org/security/2022/dsa-5096 advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujul2022.html advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.