In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10638.json"
[
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 191.0,
"function_hash": "45681057184351298291632376550561583166"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-1c1ca55b",
"target": {
"file": "include/net/netns/hash.h",
"function": "net_hash_mix"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"190441639878692735014974090640188024264",
"326448467111655817927727145853504705577",
"85297986443771295783184224499397430518",
"273655929793362126341620371711626322634",
"115693398358843007824865177330902040199",
"224020705186777660024870031768574063753",
"38160694803602929723770332656187034966",
"12472977327468712568285928336444569840",
"169348075488955337288875555482638412407",
"234192872237083848170713003807810931918"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-4f9859cf",
"target": {
"file": "net/ipv4/route.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 299.0,
"function_hash": "319544867842899874577288538879309842956"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-5724969f",
"target": {
"file": "net/ipv6/output_core.c",
"function": "__ipv6_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 456.0,
"function_hash": "24793070154006662506302175794819359753"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-5950db72",
"target": {
"file": "net/ipv6/output_core.c",
"function": "ipv6_proxy_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 370.0,
"function_hash": "271352817221443961468496725718374276165"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-788c0054",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"267630132633605647311312828545328759990",
"228862679610212255112796740852537240477",
"103951951066251061186543519151354045965"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-7f930d28",
"target": {
"file": "include/net/net_namespace.h"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"243775786977317974395502368524671738944",
"245600403789777599884663473042248749157",
"120699886910062331902131432497721600240",
"264924862855134878605626490410223091208",
"3802802654790058434452874493592219612",
"272623998122773004650538257861792166962",
"166824818776730227156858491454767992555"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-913eb6fc",
"target": {
"file": "include/net/netns/ipv4.h"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"68367419376995348437697010948654297200",
"308640216773674434963339394510682129802",
"25774611345153745021880160457846918727",
"259627600841668554958530580440390650811"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-9d9cfd25",
"target": {
"file": "net/core/net_namespace.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"23717183164086609537779557594257077988",
"257329343107452024051161963068435895378",
"123178934854251976053262505875513693641",
"126490789791201024856664690070429292819",
"149764948459298529986228949292459897024",
"206858060182812068821149800476601588192",
"273021928020484041735949190372438563730",
"53052067582135552808251975163064311041",
"161041789748967991045446988097500500349"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-b00c8202",
"target": {
"file": "include/net/netns/hash.h"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 944.0,
"function_hash": "81438939621587622703307416575314223833"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-d074b203",
"target": {
"file": "net/core/net_namespace.c",
"function": "setup_net"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 269.0,
"function_hash": "338141986284883843362156091476680038538"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-d50237e9",
"target": {
"file": "net/ipv6/output_core.c",
"function": "ipv6_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"126441207334712587168865035439762407102",
"290113336856344430322229304901876329692",
"204448365140739979423284850124986854259"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-f3c6d1bd",
"target": {
"file": "include/linux/siphash.h"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"320252308935341149647327840204640281830",
"64378871939023368248037922077867411933",
"225048770859397071751312814339810621630",
"19321172455531834074474967509337595710",
"60538071242876316290824868346018288305",
"45513419114259846049334639799772940635",
"175737815626336793613044628082377659051",
"309647452943041867261020765295158309786",
"331046433567751527276414348016330133120",
"147981247629022417243244587654170222765",
"9007039142840306458605329720561659169",
"175425694436641051260308790116055932261",
"24075375067450843640532998103682893547",
"322977377125143503799531819221002981022",
"271268056423255194036181438605399269528",
"22186022169321042247223745658637525799",
"302849336902690628379180881764914039427",
"181060320890153059707500871010761370369",
"27268781036101596843149990016947403621",
"257335303566868475045004718923476240759",
"274054828690534779445100105257361379405",
"266631008288423204172266119239964174241",
"82613843007087189574177453846324288028",
"47914750016462240003655808946860586948",
"279647514277750852728476582820354592196",
"214915231407183072732642917065490812079",
"230935319906045487053895695559090322767",
"294923583852186950650648538603663960982",
"91489735388075157432663054849149144823"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-f7ce550f",
"target": {
"file": "net/ipv6/output_core.c"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-10638.json"
[
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"163814903712150254293838788101378407599",
"214975621850269951056870635789977983219",
"106344369054599266455948183488202229428",
"276045498526001858097234618728898558847",
"184935794698240002445992533633082257689",
"61120766379695935949634029143668323229",
"328394922583145313239553259347189169681",
"158685792211611392692303678872637831799"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b",
"id": "CVE-2019-10638-01d74f05",
"target": {
"file": "net/ipv6/ip6_output.c"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 370.0,
"function_hash": "271352817221443961468496725718374276165"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-2a214150",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 944.0,
"function_hash": "81438939621587622703307416575314223833"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-31bc7942",
"target": {
"file": "net/core/net_namespace.c",
"function": "setup_net"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"126441207334712587168865035439762407102",
"290113336856344430322229304901876329692",
"204448365140739979423284850124986854259"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-3358b905",
"target": {
"file": "include/linux/siphash.h"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 361.0,
"function_hash": "282180019958699868702806955837647336368"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b",
"id": "CVE-2019-10638-3b927488",
"target": {
"file": "net/ipv6/ip6_output.c",
"function": "ipv6_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 299.0,
"function_hash": "319544867842899874577288538879309842956"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-3bdd2469",
"target": {
"file": "net/ipv6/output_core.c",
"function": "__ipv6_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"190441639878692735014974090640188024264",
"326448467111655817927727145853504705577",
"85297986443771295783184224499397430518",
"273655929793362126341620371711626322634",
"115693398358843007824865177330902040199",
"224020705186777660024870031768574063753",
"38160694803602929723770332656187034966",
"12472977327468712568285928336444569840",
"169348075488955337288875555482638412407",
"234192872237083848170713003807810931918"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-7299b1f4",
"target": {
"file": "net/ipv4/route.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"68367419376995348437697010948654297200",
"308640216773674434963339394510682129802",
"25774611345153745021880160457846918727",
"259627600841668554958530580440390650811"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-758e7de5",
"target": {
"file": "net/core/net_namespace.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"243775786977317974395502368524671738944",
"245600403789777599884663473042248749157",
"120699886910062331902131432497721600240",
"264924862855134878605626490410223091208",
"3802802654790058434452874493592219612",
"272623998122773004650538257861792166962",
"166824818776730227156858491454767992555"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-7c56aa8e",
"target": {
"file": "include/net/netns/ipv4.h"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"23717183164086609537779557594257077988",
"257329343107452024051161963068435895378",
"123178934854251976053262505875513693641",
"126490789791201024856664690070429292819",
"149764948459298529986228949292459897024",
"206858060182812068821149800476601588192",
"273021928020484041735949190372438563730",
"53052067582135552808251975163064311041",
"161041789748967991045446988097500500349"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-8237f692",
"target": {
"file": "include/net/netns/hash.h"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 456.0,
"function_hash": "24793070154006662506302175794819359753"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-8487f928",
"target": {
"file": "net/ipv6/output_core.c",
"function": "ipv6_proxy_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"284400171626042839326693870349149814540",
"48153981322295135911213182921625685444",
"85297986443771295783184224499397430518",
"273655929793362126341620371711626322634",
"115693398358843007824865177330902040199",
"197862637676047171155512434638397402737",
"241883236006688579308132561506067793666",
"14106687076923465928268046100640157496",
"230860049926235288490922038613354767536"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b",
"id": "CVE-2019-10638-a07f9f41",
"target": {
"file": "net/ipv4/route.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"320252308935341149647327840204640281830",
"64378871939023368248037922077867411933",
"225048770859397071751312814339810621630",
"19321172455531834074474967509337595710",
"60538071242876316290824868346018288305",
"45513419114259846049334639799772940635",
"175737815626336793613044628082377659051",
"309647452943041867261020765295158309786",
"331046433567751527276414348016330133120",
"147981247629022417243244587654170222765",
"9007039142840306458605329720561659169",
"175425694436641051260308790116055932261",
"24075375067450843640532998103682893547",
"322977377125143503799531819221002981022",
"271268056423255194036181438605399269528",
"22186022169321042247223745658637525799",
"302849336902690628379180881764914039427",
"181060320890153059707500871010761370369",
"27268781036101596843149990016947403621",
"257335303566868475045004718923476240759",
"274054828690534779445100105257361379405",
"266631008288423204172266119239964174241",
"82613843007087189574177453846324288028",
"47914750016462240003655808946860586948",
"279647514277750852728476582820354592196",
"214915231407183072732642917065490812079",
"230935319906045487053895695559090322767",
"294923583852186950650648538603663960982",
"91489735388075157432663054849149144823"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-b62797ed",
"target": {
"file": "net/ipv6/output_core.c"
}
},
{
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"267630132633605647311312828545328759990",
"228862679610212255112796740852537240477",
"103951951066251061186543519151354045965"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-c5332b4c",
"target": {
"file": "include/net/net_namespace.h"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 191.0,
"function_hash": "45681057184351298291632376550561583166"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92",
"id": "CVE-2019-10638-de0fab07",
"target": {
"file": "include/net/netns/hash.h",
"function": "net_hash_mix"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 333.0,
"function_hash": "266418618136411226124377776482787678283"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b",
"id": "CVE-2019-10638-f3d042b9",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_select_ident"
}
},
{
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 269.0,
"function_hash": "338141986284883843362156091476680038538"
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702",
"id": "CVE-2019-10638-ffe795dd",
"target": {
"file": "net/ipv6/output_core.c",
"function": "ipv6_select_ident"
}
}
]