CVE-2021-22566

An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits within mmu_flags_to_s1_pte_attr lead to unprivileged executable pages being mapped as executable from a privileged context. This can be leveraged by an attacker to bypass executability restrictions of user-mode pages from kernel-mode. Typically this allows a potential attacker to circumvent a mitigation, making exploitation of potential kernel-mode vulnerabilities easier. We recommend updating kernel beyond commit 7d731b4e9599088ac3073956933559da7bca6a00 and rebuilding.

• CWE-275
• CWE-732

• https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac3073956933559da7bca6a00Mailing List, Patch, Third Party Advisory
• https://fuchsia.googlesource.com/fuchsia/+/7d731b4e9599088ac3073956933559da7bca6a00Mailing List, Patch, Third Party Advisory

Published

Jan 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22556The Security Team discovered an integer overflow bug that al…7.8
• CVE-2021-22557SLO generator allows for loading of YAML files that if craft…7.8
• CVE-2021-2256Vulnerability in the Oracle Storage Cloud Software Appliance…10
• CVE-2021-22563Invalid JPEG XL images using libjxl can cause an out of boun…4.4
• CVE-2021-22564For certain valid JPEG XL images with a size slightly larger…5.5
• CVE-2021-22565An attacker could prematurely expire a verification code, ma…6.5
• CVE-2021-22567Bidirectional Unicode text can be interpreted and compiled d…3.5
• CVE-2021-22568When using the dart pub publish command to publish a package…8.8
• CVE-2021-22569An issue in protobuf-java allowed the interleaving of com.go…5.5
• CVE-2021-2257Vulnerability in the Oracle Storage Cloud Software Appliance…4.1
• CVE-2021-22570Nullptr dereference when a null char is present in a proto s…5.5
• CVE-2021-22571A local attacker could read files from some other users' SA3…5.5