Aller au contenu
Se connecter
6.6 Moyenne

CVE-2021-22600 Linux Kernel Privilege Escalation Vulnerability

Exploitation active constatée

· catalogue CISA KEV
Action attendue Apply updates per vendor instructions.
Campagnes de rançongiciel Non constatée à ce jour
Faiblesse CWE-415

Description

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Produits et versions touchés

Produit Versions touchées Corrigé en
kernel 5.16 premières → < 5.16-rc6 5.16-rc6
kernel 5.15 premières → < 5.15.11 5.15.11
kernel 5.10 premières → < 5.10.88 5.10.88
kernel 5.4 premières → < 5.4.168 5.4.168

Autres CVE de kernel

Les 13 CVE de kernel →
CVE-2022-2785 There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs… 6.7 Moyenne CVE-2020-14386 A flaw was found in the Linux kernel before 5.9-rc4 6.7 Moyenne CVE-2020-10781 A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the… 5.5 Moyenne CVE-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function, where it can be used to enable indirect… 5.5 Moyenne
Suivre cette CVE