CVE-2021-22555 log

Source
Severity High
Remote No
Type Privilege escalation
Description
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a denial of service (via heap memory corruption) through a user name space.
Group Package Affected Fixed Severity Status Ticket
AVG-2164 linux-lts 5.10.30-1 5.10.31-1 High Fixed
AVG-2163 linux-hardened 5.11.14.hardened1-1 5.11.15.hardened1-1 High Fixed
AVG-2162 linux-zen 5.11.14.zen1-1 5.11.15.zen1-2 High Fixed
AVG-2161 linux 5.11.14.arch1-1 5.11.15.arch1-2 High Fixed
References
https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528
https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html
https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b29c457a6511435960115c0f548c4360d5f4801d
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.11.15&id=b4c4e4660b37a57011677809205a3f36725b70ae
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.10.31&id=1f3b9000cb44318b0de40a0f495a5a708cd9be6e