EXPOSURES › CVE-2021-22600
CVE-2021-22600
HIGH ⌖ ON CISA KEV · EXPLOITEDA local user could exploit a Linux kernel packet socket flaw for denial-of-service or privilege escalation.
The Linux kernel's AF_PACKET implementation incorrectly freed memory, allowing local users to escalate privileges or cause DoS. DIB orgs must ensure kernel patches are applied promptly, as this KEV-listed flaw was actively exploited in the wild.
Shame score — A known kernel vulnerability was actively exploited in the wild and listed in KEV, indicating negligent patching and avoidable exposure.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.