CVE-2021-22555

high · 8.3Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2025-10-06Remediation due 2025-10-27

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

8.3

CVSS

78.7%

EPSS (exploit prob.)

100th

EPSS percentile

2021-07-07

Published

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
netapp	c400_firmware	all versions
netapp	c400	all versions
netapp	c250_firmware	all versions
netapp	c250	all versions
netapp	h410c_firmware	all versions
netapp	h410c	all versions
netapp	h300s_firmware	all versions
netapp	h300s	all versions
netapp	h500s_firmware	all versions
netapp	h500s	all versions
netapp	h700s_firmware	all versions
netapp	h700s	all versions
netapp	h410s_firmware	all versions
netapp	h410s	all versions
linux	linux_kernel	>= 2.6.19, < 4.4.267
linux	linux_kernel	>= 4.5, < 4.9.267
linux	linux_kernel	>= 4.10, < 4.14.231
linux	linux_kernel	>= 4.15, < 4.19.188
linux	linux_kernel	>= 4.20, < 5.4.113
linux	linux_kernel	>= 5.5, < 5.10.31
linux	linux_kernel	>= 5.11, < 5.12
brocade	fabric_operating_system	all versions
netapp	fas_8300_firmware	all versions
netapp	fas_8300	all versions
netapp	fas_8700_firmware	all versions
netapp	fas_8700	all versions
netapp	aff_a400_firmware	all versions
netapp	aff_a400	all versions
netapp	aff_a250_firmware	all versions
netapp	aff_a250	all versions
netapp	aff_500f_firmware	all versions
netapp	aff_500f	all versions
netapp	h610c_firmware	all versions
netapp	h610c	all versions
netapp	h610s_firmware	all versions
netapp	h610s	all versions
netapp	h615c_firmware	all versions
netapp	h615c	all versions
netapp	cloud_backup	all versions
netapp	hci_management_node	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-22555