Remote No

Type Privilege escalation

Description

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a denial of service (via heap memory corruption) through a user name space.

AVG-2164 linux-lts 5.10.30-1 5.10.31-1 High Fixed

AVG-2163 linux-hardened 5.11.14.hardened1-1 5.11.15.hardened1-1 High Fixed

AVG-2162 linux-zen 5.11.14.zen1-1 5.11.15.zen1-2 High Fixed

AVG-2161 linux 5.11.14.arch4-1 5.11.15.arch4-2 High Fixed

https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528
https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html
https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b29c457a6511435960115c0f548c4360d5f4801d
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.11.15&id=b4c4e4660b37a57011677809205a3f36725b70ae
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.31&id=1f3b9000cb44318b0de40a0f495a5a708cd9be6e