CVE-2021-22555

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

Score
CVSS 3.1 8.3 High
Status
Analyzed - cve-coordination@google.com
Published
2021-07-07
Last modified
2026-10-13
Known exploited (CISA KEV)
since 2025-10-06, action due 2025-10-27: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Weaknesses
CWE-787

Affected products

References