{"id":"CVE-2021-45485","title":"In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically ch…","summary":"In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically ch…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-327"],"vendor":"netapp","product":"e-series_santricity_os_controller","affected":["linux_kernel < 4.4.276","linux_kernel >= 4.5, < 4.9.276","linux_kernel >= 4.10, < 4.14.240","linux_kernel >= 4.15, < 4.19.198","linux_kernel >= 4.20, < 5.4.133","linux_kernel >= 5.5, < 5.10.51","linux_kernel >= 5.11, < 5.12.18","linux_kernel >= 5.13, < 5.13.3","e-series_santricity_os_controller","solidfire,_enterprise_sds_&_hci_storage_node","solidfire_&_hci_management_node","brocade_fabric_operating_system_firmware","communications_cloud_native_core_binding_support_function = 22.1.3","communications_cloud_native_core_network_exposure_function = 22.1.1","communications_cloud_native_core_policy = 22.2.0","all_flash_fabric-attached_storage_8300_firmware","fabric-attached_storage_8300_firmware","all_flash_fabric-attached_storage_8700_firmware","fabric-attached_storage_8700_firmware","aff_a400_firmware","fabric-attached_storage_a400_firmware","hci_compute_node_firmware","h300e_firmware","h300s_firmware","h410c_firmware","h410s_firmware","h500e_firmware","h500s_firmware","h610c_firmware","h610s_firmware","h615c_firmware","h700e_firmware","h700s_firmware"],"patched":["linux_kernel 5.13.3"],"published":"2021-12-25","updated":"2026-08-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-45485","references":[{"url":"https://arxiv.org/pdf/2112.09604.pdf","label":"cve@mitre.org"},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3","label":"cve@mitre.org"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20220121-0001/","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"cve@mitre.org"},{"url":"https://arxiv.org/pdf/2112.09604.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220121-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.03585,"epssPercentile":0.88904,"ingestedAt":"2026-08-05T18:50:24.974Z","exploits":{"github":1,"githubRepos":["https://github.com/Satheesh575555/linux-4.19.72_CVE-2021-45485"],"checkedAt":"2026-09-21T15:24:33.916Z"},"exploitAvailable":true,"slug":"CVE-2021-45485","body":"## Overview\n\nIn the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.\n\n## Affected\n\n- `linux_kernel < 4.4.276`\n- `linux_kernel >= 4.5, < 4.9.276`\n- `linux_kernel >= 4.10, < 4.14.240`\n- `linux_kernel >= 4.15, < 4.19.198`\n- `linux_kernel >= 4.20, < 5.4.133`\n- `linux_kernel >= 5.5, < 5.10.51`\n- `linux_kernel >= 5.11, < 5.12.18`\n- `linux_kernel >= 5.13, < 5.13.3`\n- `e-series_santricity_os_controller`\n- `solidfire,_enterprise_sds_&_hci_storage_node`\n- `solidfire_&_hci_management_node`\n- `brocade_fabric_operating_system_firmware`\n- `communications_cloud_native_core_binding_support_function = 22.1.3`\n- `communications_cloud_native_core_network_exposure_function = 22.1.1`\n- `communications_cloud_native_core_policy = 22.2.0`\n- `all_flash_fabric-attached_storage_8300_firmware`\n- `fabric-attached_storage_8300_firmware`\n- `all_flash_fabric-attached_storage_8700_firmware`\n- `fabric-attached_storage_8700_firmware`\n- `aff_a400_firmware`\n- `fabric-attached_storage_a400_firmware`\n- `hci_compute_node_firmware`\n- `h300e_firmware`\n- `h300s_firmware`\n- `h410c_firmware`\n- `h410s_firmware`\n- `h500e_firmware`\n- `h500s_firmware`\n- `h610c_firmware`\n- `h610s_firmware`\n- `h615c_firmware`\n- `h700e_firmware`\n- `h700s_firmware`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.13.3`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":41.3,"likelihood":0.7,"exploitation":12,"ransomware":0},"changes":[{"seq":4556,"id":"CVE-2021-45485","ts":1788887189838,"field":"exploit_available","old":"false","new":"true"},{"seq":3439,"id":"CVE-2021-45485","ts":1788886307072,"field":"exploit_available","old":"true","new":"false"},{"seq":2293,"id":"CVE-2021-45485","ts":1788882976785,"field":"exploit_available","old":"false","new":"true"},{"seq":1322,"id":"CVE-2021-45485","ts":1788882388751,"field":"exploit_available","old":"true","new":"false"},{"seq":436,"id":"CVE-2021-45485","ts":1788881824361,"field":"exploit_available","old":"false","new":"true"}]}