CVE
CVE-2021-22555
- First Reported
- Aug 26, 2026
- Latest Reported
- Aug 26, 2026
CVE Enrichment
- CVSS
- 7.8 HIGH
- EPSS
- 78.68%
- EPSS Percentile
- 99.58%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- cve-coordination@google.com
- Published
- 07-Jul-2021 19:15
- Last Modified
- 17-Jun-2026 10:37
- EPSS Date
- 2026-10-11
- CWE
- CWE-787
CVSS Vector
CVSS:3.1 AV:L /
AC:L /
PR:L /
UI:N /
S:U /
C:H /
I:H /
A:H
CISA KEV Details
- Date Added
- 2025-10-06
- Remediation Due
- 2025-10-27
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Notes
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555
Affected Products / Versions
- netapp / c400_firmware
Version / affected range: -
cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:* - netapp / c250_firmware
Version / affected range: -
cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:* - netapp / h410c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* - netapp / h300s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* - netapp / h500s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* - netapp / h700s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* - netapp / h410s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 2.6.19 · before (exclusive) 4.4.267
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.5 · before (exclusive) 4.9.267
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.10 · before (exclusive) 4.14.231
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.15 · before (exclusive) 4.19.188
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 4.20 · before (exclusive) 5.4.113
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 5.5 · before (exclusive) 5.10.31
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - linux / linux_kernel
Version / affected range: * · from (inclusive) 5.11 · before (exclusive) 5.12
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* - brocade / fabric_operating_system
Version / affected range: -
cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:* - netapp / fas_8300_firmware
Version / affected range: -
cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:* - netapp / fas_8700_firmware
Version / affected range: -
cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:* - netapp / aff_a400_firmware
Version / affected range: -
cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:* - netapp / aff_a250_firmware
Version / affected range: -
cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:* - netapp / aff_500f_firmware
Version / affected range: -
cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:* - netapp / h610c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* - netapp / h610s_firmware
Version / affected range: -
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* - netapp / h615c_firmware
Version / affected range: -
cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* - netapp / cloud_backup
Version / affected range: -
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* - netapp / hci_management_node
Version / affected range: -
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* - netapp / solidfire
Version / affected range: -
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* - netapp / solidfire_baseboard_management_controller
Version / affected range: *
cpe:2.3:a:netapp:solidfire_baseboard_management_controller:*:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem Kaspersky Reports Rising Vulnerability Disclosures and Early Exploit Releases in Q2 2026
CVE (26)
People (2)
Vendors (2)
Products (15)
Tools (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.