Skip to content
fr Sign in
6.6 Medium Exploited

CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far
Weakness CWE-415

Description

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Affected products and versions

Product Affected versions Fixed in
kernel 5.16 earliest → < 5.16-rc6 5.16-rc6
kernel 5.15 earliest → < 5.15.11 5.15.11
kernel 5.10 earliest → < 5.10.88 5.10.88
kernel 5.4 earliest → < 5.4.168 5.4.168

References

Timeline

  1. Published
  2. Added to the KEV catalogue
  3. Last modified

Other CVEs of kernel

The 13 CVEs of kernel →
CVE-2022-2785 There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs… 6.7 Medium CVE-2020-14386 A flaw was found in the Linux kernel before 5.9-rc4 6.7 Medium CVE-2020-10781 A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the… 5.5 Medium CVE-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect… 5.5 Medium
Track this CVE