CVE-2021-45486: Linux Kernel

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.

Affected products

• Linux Linux Kernel: before 5.12.4 (fixed in 5.12.4)
• Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
• Oracle Communications Cloud Native Core Network Exposure Function: version 22.1.1 only
• Oracle Communications Cloud Native Core Policy: version 22.2.0 only

Published 2021-12-25. Last modified 2026-06-17.