A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.

Published 4 y ago 2022-08-05 · modified 24 d ago 2026-10-14 · JSON

CVSS

8.2

v3.1 · NVD

CISA KEV

not known exploited

EPSS

4.4%

percentile 91%

Public exploits

none known

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

Exploit prediction (EPSS)

4.39% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	8.2	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`

Affected products

n/a Kernel
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Classification

Weakness

CWE-401 Missing Release of Memory after Effective Lifetime

Technology feeds

Linux kernel (RSS, critical only)

References

lore.kernel.org /lkml/20220427065233.2075-1-w%401wt.eu/T/ · x_transferred
bugzilla.redhat.com /show_bug.cgi?id=2064604 · x_transferred
security.netapp.com /advisory/ntap-20221020-0006/ · x_transferred
cert-portal.siemens.com /productcert/html/ssa-794697.html
cert-portal.siemens.com /productcert/html/ssa-561322.html

Sources

CVE List: CVE-2022-1012
NVD: CVE-2022-1012

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.