CVE-2021-22600
6.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H
Summary
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux Kernel | Kernel | unspecified < 5.4.168 | affected |
| Linux Kernel | Kernel | unspecified < 5.10.88 | affected |
| Linux Kernel | Kernel | unspecified < 5.15.11 | affected |
| Linux Kernel | Kernel | unspecified < 5.16-rc6 | affected |
Weaknesses
- CWE-415: CWE-415 Double Free
ADP Enrichment
CVE Program Container
Additional References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://www.debian.org/security/2022/dsa-5096
- https://security.netapp.com/advisory/ntap-20230110-0002/
CISA ADP Vulnrichment
- SSVC:
- Exploitation: active
- Automatable: no
- Technical Impact: partial
Additional References
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://www.debian.org/security/2022/dsa-5096
- https://security.netapp.com/advisory/ntap-20230110-0002/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.