CyberSec.Space Logo
Back to CVE Browser

CVE-2021-22600

Known Exploited (CISA KEV)MEDIUM
6.6
CVSS Severity Score
EPSS Score96.5700%
EPSS Percentile95.00th
PublishedJan 26, 2022
Last ModifiedOct 24, 2025

Vulnerability Description

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Affected Platforms (CPE)

💻
Netapp

8300 Firmware

All versions
💻
Netapp

8700 Firmware

All versions
💻
Netapp

A400 Firmware

All versions
💻
Netapp

C400 Firmware

All versions
💻
Linux

Linux Kernel

>= 4.14.175 and < 4.14.259
💻
Linux

Linux Kernel

>= 4.19.114 and < 4.19.222
💻
Linux

Linux Kernel

>= 5.4.29 and < 5.4.168
💻
Linux

Linux Kernel

>= 5.5.14 and < 5.10.88
💻
Linux

Linux Kernel

>= 5.11 and < 5.15.11
💻
Debian

Debian Linux

= 9.0
💻
Debian

Debian Linux

= 10.0
💻
Netapp

H410c Firmware

All versions
💻
Netapp

H300s Firmware

All versions
💻
Netapp

H500s Firmware

All versions
💻
Netapp

H700s Firmware

All versions
💻
Netapp

H410s Firmware

All versions

References & Advisories

🔗 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
🔗 https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
🔗 https://security.netapp.com/advisory/ntap-20230110-0002/
🔗 https://www.debian.org/security/2022/dsa-5096
🔗 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
🔗 https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
🔗 https://security.netapp.com/advisory/ntap-20230110-0002/
🔗 https://www.debian.org/security/2022/dsa-5096

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...