CVE-2022-32296
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used.
Published Jun 5, 2022 · updated Oct 14, 2026 · linux linux kernel
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
Timeline
Detection, updates, and resolution for this record.
Jun 5, 2022 · NIST NVD
Detected
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
Oct 14, 2026 · NIST NVD
Updated
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
Affected
- cpe linux/linux kernelversion unspecified
Sources
- CVE.orgCVE-2022-32296
Official CVE identifier
cve.org - NIST NVDCVE-2022-32296
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
nvd.nist.gov