CVE-2022-1012: Infoleak
A flaw was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and cause a denial of service problem.
When the table perturb size is small, an attacker can practically cover all table cells with remote destinations to the attacker server, and the attacker may observe source port information.
Also, Global table perturb is shared across network interfaces and namespaces. This allows information to be leaked between interfaces.
Reference: https://kernel.googlesource.com/pub/scm/linux/kernel/git/jkirsher/net-queue/+/b2d057560b8107c633b39aabe517ff9d93f285e3%5E%21/
Other sources
A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.
Due to the small table perturb size, a flaw was observed in the Linux kernel’s TCP source port generation algorithm in the net/ipv4/tcp.c function. This flaw allows an attacker to leak information and may cause a denial of service.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-1012?
CVE-2022-1012 has a moderate severity level as it can lead to information leakage and denial of service.
How do I fix CVE-2022-1012?
To fix CVE-2022-1012, upgrade to the recommended kernel versions provided by Red Hat.
Which versions are affected by CVE-2022-1012?
CVE-2022-1012 affects multiple kernel versions, including those prior to 0:4.18.0-372.19.1.el8_6 and 0:5.14.0-70.17.1.el9_0.
What does CVE-2022-1012 exploit?
CVE-2022-1012 exploits a flaw in the TCP source port generation algorithm due to a small table perturb size.
Who is impacted by CVE-2022-1012?
Users of affected Red Hat kernels, including those running versions below the fixed updates, are impacted by CVE-2022-1012.