CVE-2021-22600VulnerabilityPublished 04/11/2022Updated 10/24/2026

CVE-2021-22600: Linux Kernel Privilege Escalation Vulnerability

Affects Linux KernelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 04/11/2022
KEV deadline: 05/02/2022
EPSS: 6.6% chance of exploitation in 30 days – higher than 93% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-22600 (opens in a new tab)

Description

CVE-2021-22600 is a vulnerability in the Linux Kernel's packet socket (AF_PACKET) implementation that can cause incorrect memory freeing. This flaw allows a local user to potentially cause a denial-of-service (DoS) or escalate privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

The Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation that may lead to incorrect freeing of memory. This vulnerability can be exploited by a local user to trigger denial-of-service conditions or possibly escalate privileges. The vulnerability is tracked as CVE-2021-22600 and has been observed in active exploitation scenarios. No explicit patch or remediation details are provided in the available data.

Impact

A local attacker can exploit this vulnerability to cause a denial-of-service by crashing the kernel or potentially escalate privileges, gaining higher access rights on the system. The vulnerability has been exploited in the wild, indicating active threat usage.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access and monitor for suspicious activity related to packet socket usage.

Weaknesses

CWE-415Double Free (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:25:58 UTC

Weaknesses

References

Related threats