CVE-2021-22555

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel

Date Added 2025-10-06

Remediation Due 2025-10-27

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555

Weakness Classification (1)

CWE-787

Affected Software (27)

Vendor	Product	Version
broadcom	fabric_operating_system	-
linux	linux_kernel	2.6.19 – 4.4.267
linux	linux_kernel	4.5 – 4.9.267
linux	linux_kernel	4.10 – 4.14.231
linux	linux_kernel	4.15 – 4.19.188
linux	linux_kernel	4.20 – 5.4.113
linux	linux_kernel	5.5 – 5.10.31
linux	linux_kernel	5.11 – 5.12
netapp	aff_500f_firmware	-
netapp	aff_a250_firmware	-
netapp	aff_a400_firmware	-
netapp	c250_firmware	-
netapp	c400_firmware	-
netapp	cloud_backup	-
netapp	fas_8300_firmware	-
netapp	fas_8700_firmware	-
netapp	h300s_firmware	-
netapp	h410c_firmware	-
netapp	h410s_firmware	-
netapp	h500s_firmware	-
netapp	h610c_firmware	-
netapp	h610s_firmware	-
netapp	h615c_firmware	-
netapp	h700s_firmware	-
netapp	hci_management_node	-
netapp	solidfire	-
netapp	solidfire_baseboard_management_controller	*