このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2021-22600 の詳細 →
DEBIAN-CVE-2021-22600
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or d...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-1"}]}]
Debian:13
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-1"}]}]
Debian:14
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.15-1"}]}]
参照URL
- advisory security-tracker.debian.org