CVE-2021-45485: Linux Kernel

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

Affected products

  • Linux Linux Kernel: before 4.4.276 (fixed in 4.4.276); from 4.5, before 4.9.276 (fixed in 4.9.276); from 4.10, before 4.14.240 (fixed in 4.14.240); from 4.15, before 4.19.198 (fixed in 4.19.198); from 4.20, before 5.4.133 (fixed in 5.4.133); from 5.5, before 5.10.51 (fixed in 5.10.51); …
  • Netapp Aff a400 Firmware: affected versions not specified
  • Netapp All Flash Fabric-Attached Storage 8300 Firmware: affected versions not specified
  • Netapp All Flash Fabric-Attached Storage 8700 Firmware: affected versions not specified
  • Netapp Brocade Fabric Operating System Firmware: affected versions not specified
  • Netapp E-Series Santricity OS Controller: affected versions not specified
  • Netapp Fabric-Attached Storage 8300 Firmware: affected versions not specified
  • Netapp Fabric-Attached Storage 8700 Firmware: affected versions not specified
  • Netapp Fabric-Attached Storage a400 Firmware: affected versions not specified
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h610c Firmware: affected versions not specified
  • Netapp h610s Firmware: affected versions not specified
  • Netapp h615c Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Netapp Hci Compute Node Firmware: affected versions not specified
  • Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
  • Netapp Solidfire & Hci Management Node: affected versions not specified
  • Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
  • Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
  • and 1 more

Published 2021-12-25. Last modified 2026-08-05.