VULNERABILITY INTELLIGENCE
CVE-2021-22555
CVSS score8.3 HIGH
EPSS probability78.68%
CISA KEVKnown exploited vulnerability
Published2021-07-07
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Known Exploited Vulnerability
Linux Kernel Heap Out-of-Bounds Write Vulnerability
Vendor / product: Linux / Kernel
Description
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
Weakness classification
- cve-coordination@google.com: CWE-787
- nvd@nist.gov: CWE-787
Primary references
- cve-coordination@google.com — Third Party Advisory, VDB Entry
- cve-coordination@google.com — Exploit, Third Party Advisory, VDB Entry
- cve-coordination@google.com — Exploit, Third Party Advisory, VDB Entry
- cve-coordination@google.com — Exploit, Third Party Advisory, VDB Entry
- cve-coordination@google.com — Exploit, Third Party Advisory, VDB Entry
- cve-coordination@google.com — Mailing List, Patch, Vendor Advisory
- cve-coordination@google.com — Mailing List, Patch, Vendor Advisory
- cve-coordination@google.com — Exploit, Third Party Advisory
- cve-coordination@google.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry