High severity · published Jan 26, 2022
CVE-2021-22600
Double Free in net/packet/af_packet.c leading to priviledge escalation
In wildKEV
7.0
CVSS
6.6%
EPSS
Yes
On KEV
Description
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)6.6% · higher than 94% of CVEs
Exploited in the wildYes
CISA KEVListed Apr 11, 2022
Federal remediation dueMay 2, 2022
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
before 5.4.168; before 5.10.88; before 5.15.11; before 5.16-rc6 · source: vendor, NVD, KEV
8F
8300 Firmware · Netapp
All versions, or not specified · source: NVD
8F
8700 Firmware · Netapp
All versions, or not specified · source: NVD
AF
A400 Firmware · Netapp
All versions, or not specified · source: NVD
CF
C400 Firmware · Netapp
All versions, or not specified · source: NVD
DL
Debian Linux · Debian
9.0; 10.0 · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410c Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H700s Firmware · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22600
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
git.kernel.org
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
mailing-list
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
vendor-advisory
https://www.debian.org/security/2022/dsa-5096
security.netapp.com
https://security.netapp.com/advisory/ntap-20230110-0002/
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability