CVE-2022-32296: Low severity linux kernel vulnerability
Last updated 25 April 2025
Other sources
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-32296?
CVE-2022-32296 has a moderate severity rating as it allows TCP servers to potentially identify clients based on source port usage.
How do I fix CVE-2022-32296?
To fix CVE-2022-32296, update your Linux kernel to version 5.17.9 or higher, or apply the relevant patches for your distribution.
What versions of the Linux kernel are affected by CVE-2022-32296?
CVE-2022-32296 affects all Linux kernel versions before 5.17.9.
What is the impact of CVE-2022-32296 on TCP servers?
The impact of CVE-2022-32296 allows TCP servers to infer client identities by observing the source ports they use.
Are there specific distributions vulnerable to CVE-2022-32296?
Yes, any Linux distribution using kernel versions prior to 5.17.9, such as Debian with outdated linux packages, is vulnerable to CVE-2022-32296.