CVE-2020-36516: Linux Kernel

Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.

Affected products

• Linux Linux Kernel: up to and including 5.6.11
• Netapp Bootstrap OS: affected versions not specified
• Netapp Cloud Volumes Ontap Mediator: affected versions not specified
• Netapp E-Series Santricity OS Controller: from 11.0
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified

Published 2022-02-26. Last modified 2026-06-17.