CVE-2021-22600

Linux Kernel Privilege Escalation Vulnerability — Linux / Kernel

Risk tier: Monitored

Description

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.

Scoring

  • CVSS: Not yet available
  • EPSS exploitation probability: Not yet available
  • EPSS percentile: Not yet available

CISA KEV status

  • Added to KEV: 2022-04-11
  • Remediation due date: 2022-05-02
  • Known ransomware campaign use: Unknown

All exploited vulnerabilities