CVE-2021-22600mediumunder attackCWE-415

CVE-2021-22600: medium-severity vulnerability in Linux Kernel Kernel

Double Free in net/packet/af_packet.c leading to priviledge escalation

Published · Updated

Follow this CVE+ Monitor Linux+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 6.6epss 6.6%
from disclosure to weapon712 days
Published on NVDJan 26
1st PoC+712d
CISA KEV+75d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Not affected
4 products (198 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 6
Action required by CISAfederal deadline: 2022-05-02

Apply updates per vendor instructions.

In short

A double free vulnerability in Linux kernel's packet socket code allows a local user to crash the system or gain administrator privileges by sending specially crafted system calls.

Technical detail

Double free bug in packet_set_ring() function (net/packet/af_packet.c) exploitable via local syscalls without requiring elevated privileges; enables privilege escalation or denial of service through memory corruption; fixed in kernel commit ec6af094ea28f0f2dda1a6a33b14cd57e36a9755.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H
Affected products
Linux Kernel · Kernel
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Linux Kernel Kernel

In the same product, most dangerous first.

CVE-2022-2785MEDIUMArbitrary Memory read in BPF Linux KernelEPSS 0.3%