CVE-2021-22600: net/packet: rx_owner_map depends on pg_vec
Summary
CVE-2021-22600: In packet_set_ring of af_packet.c, there is a possible memory corruption due to a use after free. Affects :linux_kernel: versions >= :0, < :2022-05-05. Fixed in :2022-05-05. How to fix ↓
Also tracked for
- linux · Debian:11
The same CVE-2021-22600 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/packet package is a part of the Linux kernel and is responsible for handling network packets at the packet level. It provides functionality for packet socket creation, sending, and receiving packets. The rx_owner_map feature in the af_packet.c file allows mapping of packet reception to specific CPUs. This feature is used by various network applications and services.
Vulnerability Detail
In the packet_set_ring function of af_packet.c, there is a vulnerability that can lead to memory corruption due to a use-after-free issue. This vulnerability can be exploited locally to escalate privileges, requiring system execution privileges. The vulnerability occurs when the rx_owner_map feature depends on the pg_vec feature, leading to a use-after-free scenario. An attacker can exploit this vulnerability to execute arbitrary code or perform other malicious activities.
How To Fix
Minimum fixed version
:2022-05-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The net/packet vulnerability (CVE-2021-22600) in the Linux kernel's af_packet.c file can lead to local privilege escalation. It is recommended to apply the provided patch or update to a fixed version of the Linux kernel to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for :linux_kernel: →
FAQ
This vulnerability can lead to local privilege escalation, allowing an attacker to execute arbitrary code with elevated privileges.
No, user interaction is not required for exploitation. An attacker with local access can exploit this vulnerability.
The severity of this vulnerability is considered moderate.
This vulnerability was published on May 1, 2022.
The fix for this vulnerability was released on May 5, 2022.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
