CVE-2021-22600: Linux Kernel Privilege Escalation Vulnerability
A double free bug in packetsetring() in net/packet/afpacket.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Published Jan 26, 2022 · Updated Jun 17, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://security.netapp.com/advisory/ntap-20230110-0002/
- https://www.debian.org/security/2022/dsa-5096
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22600
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Linux vulnerabilities
All Linux entriesCVE-2026-53362
Linux Kernel Unspecified Vulnerability
high7.8ExploitedJul 4, 2026CVE-2026-53266
Linux Kernel Out-of-Bounds Write Vulnerability
high8.8ExploitedJun 25, 2026CVE-2026-31431
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
high7.8ExploitedApr 22, 2026CVE-2025-39964
Linux Kernel Race Condition Vulnerability
medium5.5ExploitedOct 13, 2025CVE-2025-39682
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
critical9.8ExploitedSep 5, 2025CVE-2025-38352
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
high7.8ExploitedJul 22, 2025
