CVE-2021-22600

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

• CWE-415
• CWE-415

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755Mailing List, Patch
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230110-0002/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755Mailing List, Patch
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230110-0002/Third Party Advisory
• https://www.debian.org/security/2022/dsa-5096Third Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22600US Government Resource

Published

Jan 26, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22571A local attacker could read files from some other users' SA3…5.5
• CVE-2021-22572On unix-like systems, the system temporary directory is shar…5.5
• CVE-2021-22573The vulnerability is that IDToken verifier does not verify i…7.3
• CVE-2021-2258Vulnerability in the Oracle Projects product of Oracle E-Bus…8.1
• CVE-2021-2259Vulnerability in the Oracle Payables product of Oracle E-Bus…8.1
• CVE-2021-2260Vulnerability in the Oracle Human Resources product of Oracl…8.1
• CVE-2021-2261Vulnerability in the Oracle Lease and Finance Management pro…8.1
• CVE-2021-2262Vulnerability in the Oracle Purchasing product of Oracle E-B…8.1
• CVE-2021-2263Vulnerability in the Oracle Sourcing product of Oracle E-Bus…8.1
• CVE-2021-22636 Texas Instruments TI-RTOS, when configured to use Hea…7.8
• CVE-2021-22637Multiple stack-based buffer overflow issues have been identi…7.8
• CVE-2021-22638Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a…7.8