High · published July 7, 2021
CVSS calls it high at 8.3. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.
🔥 A heap out-of-bounds write in Linux could turn your system into a playground for attackers! Think of this like a malfunctioning assembly line where faulty parts are allowed to slip through — if an attacker is savvy enough, they can sneak in malicious commands that cause serious disruption. With this vulnerability, attackers can gain elevated privileges or even cause a complete denial of service. This means they can manipulate your system’s memory, leading to potential data corruption or service outages. Yikes!
Think of this like a malfunctioning assembly line where faulty parts are allowed to slip through — if an attacker is savvy enough, they can sneak in malicious commands that cause serious disruption. CVE-2021-22555 allows attackers to exploit a heap memory corruption issue in the Linux kernel's netfilter module, enabling them to write beyond the allocated memory bounds and potentially execute arbitrary code.
With this vulnerability, attackers can gain elevated privileges or even cause a complete denial of service. This means they can manipulate your system’s memory, leading to potential data corruption or service outages. Yikes! To mitigate this, upgrade your Linux kernel to a patched version beyond 2.6.19-rc1. Stay vigilant by reviewing your user namespace configurations and applying adequate security hardening practices. You've got this! With these steps, you're on your way to locking down your system like a security pro! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| netapp/c400_firmware | all versions | — |
| netapp/c250_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| linux/linux_kernel | ≥ 2.6.19, < 4.4.267 | 4.4.267 |
| linux/linux_kernel | ≥ 4.5, < 4.9.267 | 4.9.267 |
| linux/linux_kernel | ≥ 4.10, < 4.14.231 | 4.14.231 |
| linux/linux_kernel | ≥ 4.15, < 4.19.188 | 4.19.188 |
| linux/linux_kernel | ≥ 4.20, < 5.4.113 | 5.4.113 |
| linux/linux_kernel | ≥ 5.5, < 5.10.31 | 5.10.31 |
| linux/linux_kernel | ≥ 5.11, < 5.12 | 5.12 |
| broadcom/fabric_operating_system | all versions | — |
| netapp/fas_8300_firmware | all versions | — |
| netapp/fas_8700_firmware | all versions | — |
| netapp/aff_a400_firmware | all versions | — |
| netapp/aff_a250_firmware | all versions | — |
| netapp/aff_500f_firmware | all versions | — |
| netapp/h610c_firmware | all versions | — |
| netapp/h610s_firmware | all versions | — |
| netapp/h615c_firmware | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/hci_management_node | all versions | — |
| netapp/solidfire | all versions | — |
| netapp/solidfire_baseboard_management_controller | all versions | — |