CVEvulnerability

CVE-2021-22555

7.8 HIGH Known exploited Published 2021-07-07 Modified 2026-10-13 Official page ↗

CISA Known Exploited Vulnerability

Linux Kernel Heap Out-of-Bounds Write Vulnerability — Linux Kernel

Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

Added to KEV: 2025-10-06
Remediation due: 2025-10-27
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555

Status: Analyzed
Published: 2021-07-07
Last modified: 2026-10-13
Assigner: [email protected]
CVSS 3.1 ([email protected]): 8.3 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses: CWE-787

Description

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

Affected configurations

• netapp c400 firmware • netapp c250 firmware • netapp h410c firmware • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h410s firmware • linux linux kernel (>= 2.6.19 < 4.4.267) • linux linux kernel (>= 4.5 < 4.9.267) • linux linux kernel (>= 4.10 < 4.14.231) • linux linux kernel (>= 4.15 < 4.19.188) • linux linux kernel (>= 4.20 < 5.4.113) • linux linux kernel (>= 5.5 < 5.10.31) • linux linux kernel (>= 5.11 < 5.12) • broadcom fabric operating system • netapp fas 8300 firmware • netapp fas 8700 firmware • netapp aff a400 firmware • netapp aff a250 firmware • netapp aff 500f firmware • netapp h610c firmware • netapp h610s firmware • netapp h615c firmware • netapp cloud backup • netapp hci management node • netapp solidfire • netapp solidfire baseboard management controller

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References