VDB
CVE-2021-22556
CVE-2021-22556
PUBLISHED
CVSS 5.300000190734863 MEDIUM
The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that they don’t own, allowing them to control kernel memory from userspace. We recommend upgrading to kernel version 4.1 or beyond.
EPSS 0.16% · 5.4th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS Score
0.16%
5.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fuchsia | 0 | |
| Google LLC | Fuchsia Kernel | * |
Timeline
- May 3, 2022 CVE Published
- May 4, 2022 EPSS Score
- May 11, 2022 EPSS Score
- Jun 23, 2022 EPSS Score
- Aug 12, 2022 EPSS Score
- Oct 1, 2022 EPSS Score
- Nov 20, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Feb 27, 2023 EPSS Score
- Apr 18, 2023 EPSS Score
- Jun 7, 2023 EPSS Score
- Jul 26, 2023 EPSS Score