CVE-2021-22600

Double Free in net/packet/af_packet.c leading to priviledge escalation

Published: 1/26/2022 Last updated: 1/29/2025 Reserved: 1/5/2021

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

CNA assigner: Google (14ed7db2-1595-443d-9d34-6215bf890778) Requested by: n/a

Metrics

Version	Score	Severity	Vector String
3.1	6.6	Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (1)

Product	Vendor	Version
Kernel	Linux Kernel	Snapdragon 4 Gen 1 Mobile Platform

CVE-2021-22600

Double Free in net/packet/af_packet.c leading to priviledge escalation

Metrics

Opam packages affected (27)

Products affected (1)

References (8)