{
    "id": "CVE-2021-22555",
    "published": "2021-07-07 12:15:08",
    "last_modified": "2026-06-17 03:37:25",
    "cvss_score": "8.3",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
    "cwe": "CWE-787",
    "description": "A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space",
    "epss_score": "0.78684",
    "epss_percentile": "0.99577",
    "kev": 1,
    "kev_due": "2025-10-27",
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:27:39",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2025-10-27."
    },
    "products": [
        {
            "vendor": "brocade",
            "product": "fabric_operating_system"
        },
        {
            "vendor": "linux",
            "product": "linux_kernel"
        },
        {
            "vendor": "netapp",
            "product": "aff_500f"
        },
        {
            "vendor": "netapp",
            "product": "aff_500f_firmware"
        },
        {
            "vendor": "netapp",
            "product": "aff_a250"
        },
        {
            "vendor": "netapp",
            "product": "aff_a250_firmware"
        },
        {
            "vendor": "netapp",
            "product": "aff_a400"
        },
        {
            "vendor": "netapp",
            "product": "aff_a400_firmware"
        },
        {
            "vendor": "netapp",
            "product": "c250"
        },
        {
            "vendor": "netapp",
            "product": "c250_firmware"
        },
        {
            "vendor": "netapp",
            "product": "c400"
        },
        {
            "vendor": "netapp",
            "product": "c400_firmware"
        },
        {
            "vendor": "netapp",
            "product": "cloud_backup"
        },
        {
            "vendor": "netapp",
            "product": "fas_8300"
        },
        {
            "vendor": "netapp",
            "product": "fas_8300_firmware"
        },
        {
            "vendor": "netapp",
            "product": "fas_8700"
        },
        {
            "vendor": "netapp",
            "product": "fas_8700_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h300s"
        },
        {
            "vendor": "netapp",
            "product": "h300s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h410c"
        },
        {
            "vendor": "netapp",
            "product": "h410c_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h410s"
        },
        {
            "vendor": "netapp",
            "product": "h410s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h500s"
        },
        {
            "vendor": "netapp",
            "product": "h500s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h610c"
        },
        {
            "vendor": "netapp",
            "product": "h610c_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h610s"
        },
        {
            "vendor": "netapp",
            "product": "h610s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h615c"
        },
        {
            "vendor": "netapp",
            "product": "h615c_firmware"
        },
        {
            "vendor": "netapp",
            "product": "h700s"
        },
        {
            "vendor": "netapp",
            "product": "h700s_firmware"
        },
        {
            "vendor": "netapp",
            "product": "hci_management_node"
        },
        {
            "vendor": "netapp",
            "product": "solidfire"
        },
        {
            "vendor": "netapp",
            "product": "solidfire_baseboard_management_controller"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2021-22555",
        "date_added": "2025-10-06",
        "due_date": "2025-10-27",
        "vendor": "Linux",
        "product": "Kernel",
        "name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability",
        "ransomware": 0
    },
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "50135",
            "title": "Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation",
            "date": "2021-07-15",
            "url": "https://www.exploit-db.com/exploits/50135"
        }
    ],
    "refs_list": [
        "http://packetstormsecurity.com/files/163528/Linux-Kernel-Netfilter-Heap-Out-Of-Bounds-Write.html",
        "http://packetstormsecurity.com/files/163878/Kernel-Live-Patch-Security-Notice-LSN-0080-1.html",
        "http://packetstormsecurity.com/files/164155/Kernel-Live-Patch-Security-Notice-LSN-0081-1.html",
        "http://packetstormsecurity.com/files/164437/Netfilter-x_tables-Heap-Out-Of-Bounds-Write-Privilege-Escalation.html",
        "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
        "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21",
        "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d",
        "https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528",
        "https://security.netapp.com/advisory/ntap-20210805-0010/",
        "http://packetstormsecurity.com/files/163528/Linux-Kernel-Netfilter-Heap-Out-Of-Bounds-Write.html",
        "http://packetstormsecurity.com/files/163878/Kernel-Live-Patch-Security-Notice-LSN-0080-1.html",
        "http://packetstormsecurity.com/files/164155/Kernel-Live-Patch-Security-Notice-LSN-0081-1.html",
        "http://packetstormsecurity.com/files/164437/Netfilter-x_tables-Heap-Out-Of-Bounds-Write-Privilege-Escalation.html",
        "http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html",
        "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21",
        "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d",
        "https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528",
        "https://security.netapp.com/advisory/ntap-20210805-0010/",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22555"
    ]
}