CVE-2021-22600

Katalog CVE

CVSS 7.0 · High KEV · sudah dieksploitasi EPSS 6,6%

Kerentanan Double Free pada netapp 8300 firmware, netapp 8700 firmware +9 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD. Masuk katalog KEV CISA pada 11 April 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Rincian

Terbit di NVD

26 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

6,6% peluang dieksploitasi; lebih tinggi dari 93,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Linux Kernel Privilege Escalation Vulnerability

Masuk KEV

11 April 2022

Tenggat CISA

2 Mei 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e... mailing list · patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22600 pemerintah AS
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230110-0002/ advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5096 advisory pihak ketiga