A double-free flaw was found in the Linux kernel’s packet protocol subsystem in the way a user call triggers the packet_set_ring() function of the net/packet/af_packet.c. This flaw allows a local user to crash or escalate their privileges on the system.

Mitigation

Only users with access to the AF_PACKET socket can trigger this vulnerability. The mitigation would be to disable CAP_NET_RAW capability for the users that prevents access to AF_PACKET.

References

bugzilla.redhat.com/show_bug.cgi?id=2047912

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

nvd.nist.gov/vuln/detail/CVE-2021-22600

www.cisa.gov/known-exploited-vulnerabilities-catalog

www.cve.org/CVERecord?id=CVE-2021-22600

osv 8

cisa_kev 1

cbl_mariner 1

ubuntucve 2

debiancve 2

attackerkb 1

thn 1

prion 2

veracode 2

nvd 2

cve 2

cvelist 2

cnvd 1

hackerone 1

oraclelinux 9

metasploit 1

openvas 34

exploitpack 2

redhatcve 1

suse 27

zdt 3

cloudfoundry 3

nessus 58

virtuozzo 1

packetstorm 1

exploitdb 3

f5 1

seebug 1

ubuntu 8

threatpost 1

photon 2

fedora 2

googleprojectzero 1

redhat 3

centos 1

amazon 1

ibm 2

mageia 3

kitploit 1

debian 1

osv

net/packet: rx_owner_map depends on pg_vec

2022-05-01 00:00:00

linux-gke, linux-gke-5.4 vulnerabilities

2022-02-03 04:13:54

linux-hwe-5.13 vulnerabilities

2022-02-18 00:41:45

cisa_kev

Linux Kernel Privilege Escalation Vulnerability

2022-04-11 00:00:00

cbl_mariner

CVE-2021-22600 affecting package kernel for versions less than 5.15.18.1-1

2022-04-09 06:52:47

ubuntucve

CVE-2021-22600

2022-01-26 00:00:00

CVE-2017-7308

2017-03-29 00:00:00

debiancve

CVE-2021-22600

2022-01-26 14:15:08

CVE-2017-7308

2017-03-29 20:59:00

attackerkb

CVE-2021-22600

2022-01-26 00:00:00

thn

Google Releases Android Update to Patch Actively Exploited Vulnerability

2022-05-06 05:13:00

prion

Double free

2022-01-26 14:15:00

Integer overflow

2017-03-29 20:59:00

veracode

Privilege Escalation

2022-02-08 18:01:01

Out-Of-Bounds Write

2019-05-02 06:11:33

nvd

CVE-2021-22600

2022-01-26 14:15:08

CVE-2017-7308

2017-03-29 20:59:00

cve

CVE-2021-22600

2022-01-26 14:15:08

CVE-2017-7308

2017-03-29 20:59:00

cvelist

CVE-2021-22600 Double Free in net/packet/af_packet.c leading to priviledge escalation

2022-01-26 00:00:00

CVE-2017-7308

2017-03-29 20:00:00

cnvd

Linux kernel buffer overflow vulnerability (CNVD-2022-07634)

2022-01-28 00:00:00

hackerone

Internet Bug Bounty: Linux kernel: CVE-2017-7308: a signedness issue in AF_PACKET sockets

2019-08-29 13:48:44

oraclelinux

Unbreakable Enterprise kernel security update

2017-06-01 00:00:00

Unbreakable Enterprise kernel security update

2017-06-01 00:00:00

kernel security, bug fix, and enhancement update

2017-05-26 00:00:00

metasploit

AF_PACKET packet_set_ring Privilege Escalation

2018-04-28 01:40:17

openvas

SUSE: Security Advisory (SUSE-SU-2017:1287-1)

2021-04-19 00:00:00

SUSE: Security Advisory (SUSE-SU-2017:1285-1)

2021-04-19 00:00:00

SUSE: Security Advisory (SUSE-SU-2017:1278-1)

2021-04-19 00:00:00

exploitpack

Linux Kernel 4.8.0-34 4.8.0-45 (Ubuntu Linux Mint) - Packet Socket Local Privilege Escalation

2018-12-29 00:00:00

Linux Kernel 4.8.0-41-generic (Ubuntu) - Packet Socket Local Privilege Escalation

2017-05-11 00:00:00

redhatcve

CVE-2017-7308

2019-10-25 00:24:39

suse

Security update for Linux Kernel Live Patch 17 for SLE 12 (important)

2017-05-15 21:10:57

Security update for Linux Kernel Live Patch 18 for SLE 12 (important)

2017-05-15 21:20:49

Security update for Linux Kernel Live Patch 13 for SLE 12 (important)

2017-05-15 21:31:58

zdt

Linux Kernel 4.8.0 - Packet Socket Local root Privilege Escalation Exploit

2017-05-12 00:00:00

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation Exploit

2018-05-18 00:00:00

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

2019-07-26 00:00:00

cloudfoundry

USN-3256-2: Linux kernel (HWE) vulnerability | Cloud Foundry

2017-04-12 00:00:00

USN-5294-2: Linux kernel vulnerabilities | Cloud Foundry

2022-03-11 00:00:00

USN-5298-1: Linux kernel vulnerabilities | Cloud Foundry

2022-04-21 00:00:00

nessus

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel (HWE) vulnerability (USN-3256-2)

2017-04-05 00:00:00

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3579)

2017-06-02 00:00:00

F5 Networks BIG-IP : Linux kernel vulnerability (K82224417) Deprecated

2017-05-08 00:00:00

virtuozzo

Kernel security update: Virtuozzo ReadyKernel patch 17.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

2017-04-04 00:00:00

packetstorm

AF_PACKET packet_set_ring Privilege Escalation

2018-05-17 00:00:00

exploitdb

Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation (Metasploit)

2018-05-18 00:00:00

Linux Kernel 4.8.0-41-generic (Ubuntu) - Packet Socket Local Privilege Escalation

2017-05-11 00:00:00

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

2018-12-29 00:00:00

K82224417 : Linux kernel vulnerability CVE-2017-7308

2017-05-05 00:00:00

seebug

Linux kernel Local Denial of Service Vulnerability (CVE-2017-7308 )

2017-05-11 00:00:00

ubuntu

Linux kernel vulnerability

2017-04-05 00:00:00

Linux kernel (HWE) vulnerability

2017-04-05 00:00:00

Linux kernel (GKE) vulnerabilities

2022-02-03 00:00:00

threatpost

RSAC 2019: Container Escape Hack Targets Vulnerable Linux Kernel

2019-03-04 13:30:17

photon

Important Photon OS Security Update - PHSA-2017-0041

2017-05-11 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0011

2017-04-14 00:00:00

fedora

[SECURITY] Fedora 25 Update: kernel-4.10.10-200.fc25

2017-04-17 20:54:22

[SECURITY] Fedora 24 Update: kernel-4.10.10-100.fc24

2017-04-17 20:54:45

googleprojectzero

Exploiting the Linux kernel via packet sockets

2017-05-10 00:00:00

redhat

(RHSA-2017:1297) Important: kernel-rt security and bug fix update

2017-05-25 13:15:44

(RHSA-2017:1298) Important: kernel-rt security and bug fix update

2017-05-25 13:21:34

(RHSA-2017:1308) Important: kernel security, bug fix, and enhancement update

2017-05-25 13:27:24

centos

kernel, perf, python security update

2017-05-26 02:33:51

amazon

Important: kernel

2017-05-10 17:06:00

ibm

Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel

2018-06-16 22:02:59

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

2018-06-18 01:38:07

mageia

Updated kernel packages fixes security vulnerabilities

2017-05-10 23:47:44

Updated kernel-linus packages fixes security vulnerabilities

2017-05-26 09:54:58

Updated kernel-tmb packages fixes security vulnerabilities

2017-05-26 09:54:58

kitploit

Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework

2017-11-04 13:30:00

debian

[SECURITY] [DLA 922-1] linux security update

2017-04-28 12:39:18

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.9%

JSON

Related for RH:CVE-2021-22600