CVE-2021-22555

Published Jul 7, 2021

Last updated 14 days ago

Exploit known CVSS high 8.3

Linux

Overview

Description: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
Source: cve-coordination@google.com
NVD status: Analyzed
Products: c400_firmware, c250_firmware, h410c_firmware, h300s_firmware, h500s_firmware, h700s_firmware, h410s_firmware, linux_kernel, fabric_operating_system, fas_8300_firmware, fas_8700_firmware, aff_a400_firmware, aff_a250_firmware, aff_500f_firmware, h610c_firmware, h610s_firmware, h615c_firmware, cloud_backup, hci_management_node, solidfire, solidfire_baseboard_management_controller

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Known exploits

Data from CISA

Vulnerability name: Linux Kernel Heap Out-of-Bounds Write Vulnerability
Exploit added on: Oct 6, 2025
Exploit action due: Oct 27, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

cve-coordination@google.com: CWE-787
nvd@nist.gov: CWE-787

Hype score: Not currently trending

🛡️ Cyber Threat Digest – 2025-10-07 KEV: CVE-2021-22555 — Linux Kernel Heap Out-of-Bounds NVD: CVE-2025-11336 — security vulnerability has been News: Google's new AI bug bounty program… #cybersecurity #infosec #CVE More: https://t.co/J1fpKfnDnv
@dpharristech
7 Oct 2025
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9AC7AD92-8B33-4137-A4EC-08641E4AF857"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:c400:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "AD443748-B0D1-4C1A-A62E-BD5FB5967370"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1AB1EC2-2560-494A-A51B-6F20CE318FEB"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:c250:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "58DE2B52-4E49-4CD0-9310-00291B0352C7"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "8497A4C9-8474-4A62-8331-3FE862ED4098"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E869A37-B25A-4CFD-AFA1-964C540B7283",
            "versionEndExcluding": "4.4.267",
            "versionStartIncluding": "2.6.19"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8F1C60CB-5594-496C-8DF0-68D909707254",
            "versionEndExcluding": "4.9.267",
            "versionStartIncluding": "4.5"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1285CF4-6285-4288-9981-03A04F93519E",
            "versionEndExcluding": "4.14.231",
            "versionStartIncluding": "4.10"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "46073F63-74D1-4675-999A-574C1C13B627",
            "versionEndExcluding": "4.19.188",
            "versionStartIncluding": "4.15"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BB3CE52D-3245-4B6C-9C92-897BCB496882",
            "versionEndExcluding": "5.4.113",
            "versionStartIncluding": "4.20"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB0A42D4-2DAC-4DE0-A20B-A2700AA5E63A",
            "versionEndExcluding": "5.10.31",
            "versionStartIncluding": "5.5"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66C052DB-C48A-43D4-A1A8-AF1E331199D4",
            "versionEndExcluding": "5.12",
            "versionStartIncluding": "5.11"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41CD1160-B681-41EF-9EB4-06CE0F53C501"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D5CDADAB-72A5-4526-8432-E6C9AC56B29F"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F3E70A56-DBA8-45C7-8C49-1A036501156F"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D5DE972-F8B8-4964-943A-DA0BD18289D1"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89612649-BACF-4FAC-9BA4-324724FD93A6"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F3D9B255-C1AF-42D1-BF9B-13642FBDC080"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD7CFE0E-9D1E-4495-B302-89C3096FC0DF"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5921A877-18BF-43FE-915C-D226E140ACFC"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7296A1F2-D315-4FD5-8A73-65C480C855BE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          },
          {
            "criteria": "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A3C19813-E823-456A-B1CE-EC0684CE1953"
          },
          {
            "criteria": "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          },
          {
            "criteria": "cpe:2.3:a:netapp:solidfire_baseboard_management_controller:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D878165F-5C16-4376-8058-28787C9FF923"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Known exploits

Weaknesses

Social media

Configurations

References