CVE-2022-32296

Published June 5th, 2022

View on NVD ↗

CVSS v3

3.3

LOW

CVSS v2

2.1

LOW

Affected

PROJECT

Description

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.

0xkol/rfc6056-device-tracker

An implementation of a device tracking technique based on Algorithm 4 (Double-Hash Port Selection) of RFC 6056.

GitHub