CVEs / CVE-2021-22600
CVE-2021-22600: Linux Kernel Privilege Escalation Vulnerability
- Known exploited in the CISA KEV catalog since 11 Apr 2022
- high 7 CVSS 3.1 (NVD)
- EPSS 6.58% chance of exploitation in the next 30 days, higher than 93% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2021-22600
Summary
Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.
Description
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| Linux Kernel Kernel | from unspecified, before 5.4.168 | 5.4.168 |
| Linux Kernel Kernel | from unspecified, before 5.10.88 | 5.10.88 |
| Linux Kernel Kernel | from unspecified, before 5.15.11 | 5.15.11 |
| Linux Kernel Kernel | from unspecified, before 5.16-rc6 | 5.16-rc6 |
Exploitation
| In CISA KEV since | 11 Apr 2022 |
|---|---|
| Due date for US federal agencies | 2 May 2022 |
| Used in ransomware campaigns | Unknown |
| Required action | Apply updates per vendor instructions. |
Severity
| CVSS 3.1 | 7 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HScored by NVD |
|---|---|
| Weakness | CWE-415 |
References
- CVE-2021-22600 on NVD
- CVE-2021-22600 in the CISA KEV catalog
- CVE-2021-22600 on OSV
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 Mailing List, Patch
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20230110-0002/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5096 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22600 US Government Resource
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.