CVE-2021-22600 — Linux Kernel Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2021-22600

CVE-2021-22600: Linux Kernel Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Linux
Product	Kernel
Date added	2022-04-11
Due date	2022-05-02
Ransomware campaign use	Unknown

Description

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-22600

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-22600
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog