Search/CVE-2021-45485
● CVE — High

CVE-2021-45485

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
3.58%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Connections
26 relationships
linux kernel
source
h300e firmware
source
h300s firmware
source
h410c firmware
source
h410s firmware
source
h500e firmware
source
h500s firmware
source
h610c firmware
source
h610s firmware
source
h615c firmware
source
h700e firmware
source
e-series santricity os controller
source
solidfire & hci management node
source
communications cloud native core policy
source
aff a400 firmware
source
hci compute node firmware
source
solidfire, enterprise sds & hci storage node
source
fabric-attached storage 8300 firmware
source
fabric-attached storage 8700 firmware
source
all flash fabric-attached storage 8300 firmware
source
all flash fabric-attached storage 8700 firmware
source
fabric-attached storage a400 firmware
source
communications cloud native core binding support function
source
communications cloud native core network exposure function
source
brocade fabric operating system firmware
source
Timeline
disclosure → media coverage
Dec 25, 2021
Disclosure — published as a CVE record. · last revised by NVD Aug 5, 2026
Public PoC (1)
github.com/Satheesh575555/linux-4.19.72_CVE-2021-45485
Unverified third-party code — review before executing.