ZeroDay Findings
Sign inSign up

Findings

CVE-2021-22600

Linux Kernel Privilege Escalation Vulnerability

Published Jan 26, 2022 · updated Jun 16, 2026 · netapp 8300 firmware

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Timeline

Detection, updates, and resolution for this record.

  1. Jan 26, 2022 · Catalog

    Detected

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

  2. Apr 11, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 2, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

Required action

Apply updates per vendor instructions.

CISA due date May 2, 2022

Affected

  • cpe debian/debian linux9.0
  • cpe linux/linux kernelversion unspecified
  • cpe netapp/8300 firmwareversion unspecified
  • cpe netapp/8700 firmwareversion unspecified
  • cpe netapp/a400 firmwareversion unspecified
  • cpe netapp/c400 firmwareversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2021-22600

    Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

    cisa.gov
  • CVE.orgCVE-2021-22600

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-22600

    30-day exploitation probability 6.6%

    first.org
  • NIST NVDCVE-2021-22600

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

    nvd.nist.gov

References