{"cve_id":"CVE-2021-22555","published":"2021-07-07T12:15:08.453000+00:00","last_modified":"2026-10-13T18:25:34.177000+00:00","vuln_status":"Analyzed","description":"A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","base_score":7.8,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-787"],"in_kev":true,"kev_date_added":"2025-10-06","kev_ransomware":false,"epss_score":0.78684,"epss_percentile":0.99588,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-28T03:16:54.929943+00:00","first_seen":"2021-07-07T12:15:08.453000+00:00","kev_first_seen":"2025-10-06T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["broadcom","linux","netapp"],"products":["aff_500f","aff_500f_firmware","aff_a250","aff_a250_firmware","aff_a400","aff_a400_firmware","c250","c250_firmware","c400","c400_firmware","cloud_backup","fabric_operating_system","fas_8300","fas_8300_firmware","fas_8700","fas_8700_firmware","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500s","h500s_firmware","h610c","h610c_firmware","h610s","h610s_firmware","h615c","h615c_firmware","h700s","h700s_firmware","hci_management_node","linux_kernel","solidfire","solidfire_baseboard_management_controller"],"affected":[{"vendor":"broadcom","product":"fabric_operating_system","ranges":["all versions"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 5.11 and < 5.12","≥ 2.6.19 and < 4.4.267","≥ 4.5 and < 4.9.267","≥ 4.10 and < 4.14.231","≥ 4.15 and < 4.19.188","≥ 4.20 and < 5.4.113","≥ 5.5 and < 5.10.31"]},{"vendor":"netapp","product":"aff_500f_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"aff_a250_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"aff_a400_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"c250_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"c400_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"cloud_backup","ranges":["all versions"]},{"vendor":"netapp","product":"fas_8300_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"fas_8700_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h615c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"hci_management_node","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire_baseboard_management_controller","ranges":["all versions"]}]}