title: Double Free in net/packet/af_packet.c leading to priviledge escalation
description: A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
problem types: CWE-415 Double Free
affected:
{
vendor: Linux Kernel
product: Kernel
versions:
version: unspecified, lessThan: 5.4.168, status: affected, versionType: custom
version: unspecified, lessThan: 5.10.88, status: affected, versionType: custom
version: unspecified, lessThan: 5.15.11, status: affected, versionType: custom
version: unspecified, lessThan: 5.16-rc6, status: affected, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
]