CVE-2022-32296: Linux Kernel

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

Affected products

• Linux Linux Kernel: before 5.17.9 (fixed in 5.17.9)

Published 2022-06-05. Last modified 2026-06-17.