CISA bu açığın gerçek saldırılarda kullanıldığını 06.10.2025 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 27.10.2025.
Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| broadcom | fabric operating system | — | |
| linux | linux kernel | 2.6.19 – < 4.4.267 | |
| netapp | aff 500f firmware | — | |
| netapp | aff a250 firmware | — | |
| netapp | aff a400 firmware | — | |
| netapp | c250 firmware | — | |
| netapp | c400 firmware | — | |
| netapp | cloud backup | — | |
| netapp | fas 8300 firmware | — | |
| netapp | fas 8700 firmware | — | |
| netapp | h300s firmware | — | |
| netapp | h410c firmware | — | |
| netapp | h410s firmware | — | |
| netapp | h500s firmware | — | |
| netapp | h610c firmware | — | |
| netapp | h610s firmware | — | |
| netapp | h615c firmware | — | |
| netapp | h700s firmware | — | |
| netapp | hci management node | — | |
| netapp | solidfire | — | |
| netapp | solidfire baseboard management controller | — | |
| — | Linux Kernel | 2.6.19-rc1 – < unspecified |
cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:c250_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 2.6.19 < 4.4.267cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.5 < 4.9.267cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.10 < 4.14.231cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.15 < 4.19.188cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.20 < 5.4.113cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.5 < 5.10.31cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.12cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire_baseboard_management_controller:*:*:*:*:*:*:*:*Ücretsiz ve açık kaynak honeypot sensörümüz, sunucunuzun kullanmadığı portlarda bekler; bağlanan tarayıcıları ve saldırganları ortak kara listeye bildirir.