Exploited vulnerability

CVE-2021-22600

TLP:CLEAR

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

Facts

Vendor: Linux
Product: Kernel
CVSS: 6.6
EPSS (probability of exploitation within 30 days): 6.6 %
On CISA's Known Exploited Vulnerabilities list since: 11 April 2022
First known exploitation: 11 April 2022
CISA's deadline for US federal agencies: 2 May 2022
Weakness: CWE-415
First seen by Risk Letters: 11 April 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD