CVE-2021-22555High· 8.3▾ Abyssal⚠ Exploited in the wildPoC availableA heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 45.7 · likelihood 15.7 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Oct 27, 2025
Last analysed / modified upstream
79%
Exploit-DB · 13 GitHub repos · Metasploit ×1 (last check)
Added to the CISA catalog on Oct 6, 2025. Federal remediation due Oct 27, 2025. View catalog ↗
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
c400_firmwarec250_firmwareh410c_firmwareh300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwarelinux_kernel >= 2.6.19, < 4.4.267linux_kernel >= 4.5, < 4.9.267linux_kernel >= 4.10, < 4.14.231linux_kernel >= 4.15, < 4.19.188linux_kernel >= 4.20, < 5.4.113linux_kernel >= 5.5, < 5.10.31linux_kernel >= 5.11, < 5.12fabric_operating_systemfas_8300_firmwarefas_8700_firmwareaff_a400_firmwareaff_a250_firmwareaff_500f_firmwareh610c_firmwareh610s_firmwareh615c_firmwarecloud_backuphci_management_nodesolidfiresolidfire_baseboard_management_controllerUpgrade past the affected range:
linux_kernel 5.12Connected by shared product, vendor, weakness, or advisory.
CVE-2021-27365High· 7.8An issue was discovered in the Linux kernel through 5.11.3
CVE-2021-43975Medium· 6.7In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length v…
CVE-2020-12358Medium· 4.4Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVE-2022-0995High· 7.8An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem
CVE-2021-4034High· 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility
CVE-2022-21882High· 7.0Win32k Elevation of Privilege Vulnerability