CVE-2021-22600

Double Free in net/packet/af_packet.c leading to priviledge escalation

MEDIUM 6.6CISA KEV ↗Exploited per ENISA since 2022-04-11

At a glance

Source: NVD
EPSS: EPSS 6.59 % · percentile 94 (2026-10-28)
State: PUBLISHED
Published: 2022-01-26 00:00 UTC
Updated: 2025-10-21 23:15 UTC
Assigner: Google
NVD status: Analyzed

Description

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Weaknesses (CWE)

CWE-415 — Double Free

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 6.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H	Google
CVSS 3.1	MEDIUM 6.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H	NVD · cve-coordination@google.com (Secondary)
CVSS 3.1	HIGH 7.0	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	HIGH 7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2021-9736
GCVE · GCVE-0-2021-22600

CERT-FR advisories

CERTFR-2022-AVI-264 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
CERTFR-2022-AVI-231 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
CERTFR-2022-AVI-199 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2022-AVI-193 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2022-AVI-176 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2022-AVI-170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2022-AVI-163 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2022-AVI-144 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2022-AVI-141 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2022-AVI-140 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2022-AVI-109 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.14.175 < 4.14.259
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.19.114 < 4.19.222
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.4.29 < 5.4.168
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.5.14 < 5.10.88
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.15.11
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

Affected products

Product	Versions
Linux Kernel · Kernel	affected unspecified < 5.4.168 ; affected unspecified < 5.10.88 ; affected unspecified < 5.15.11 ; affected unspecified < 5.16-rc6

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
CISA Known Exploited Vulnerabilities	CC0 1.0
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD