Description
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Kernel Kernel
unspecified to < 5.4.168affectedunspecified to < 5.10.88affectedunspecified to < 5.15.11affectedunspecified to < 5.16-rc6affected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 ↗
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html ↗
- https://www.debian.org/security/2022/dsa-5096 ↗
- https://security.netapp.com/advisory/ntap-20230110-0002/ ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22600 ↗