Exploitation Summary
CVE-2021-22600 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 11, 2022. EIP tracks 2 public exploits from researchers including Chinmay1743, sendINUX.
AI-analyzed exploit summary This repository provides a technical analysis and privilege probe for CVE-2021-22600, demonstrating how AF_PACKET socket creation and PACKET_RX_RING configuration behave under different privilege levels (user vs. root). It includes a detailed explanation of kernel checks for CAP_NET_RAW and the implications of exploitation.
Description
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
Exploits (2)
This repository provides a technical analysis and privilege probe for CVE-2021-22600, demonstrating how AF_PACKET socket creation and PACKET_RX_RING configuration behave under different privilege levels (user vs. root). It includes a detailed explanation of kernel checks for CAP_NET_RAW and the implications of exploitation.
This repository contains functional exploit code for CVE-2021-22600, leveraging the DirtyPagetable technique to achieve local privilege escalation (LPE) in the Linux kernel. The exploit involves manipulating kernel memory structures through socket operations and signalfd spraying.
References (5)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H