NetSight
IP …
high8.3Known exploitedPublic exploit code

CVE-2021-22555

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Exploited in the wild

This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-10-06. Federal due date: 2025-10-27.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.

Affected products

VendorProductAffected versions
NetappC400 Firmware
All versions
NetappC250 Firmware
All versions
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
LinuxLinux Kernel
from 2.6.19 before 4.4.267
from 4.5 before 4.9.267
from 4.10 before 4.14.231
from 4.15 before 4.19.188
from 4.20 before 5.4.113
from 5.5 before 5.10.31
BroadcomFabric Operating System
All versions
NetappFas 8300 Firmware
All versions
NetappFas 8700 Firmware
All versions
NetappAff A400 Firmware
All versions

Weakness classification

CWE-787

References