CVE-2021-41073

kernel: local user privilege escalation via loop_rw_iter in fs/io_uring.c

Published Sep 19, 2021 CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Description
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-4978-1 linux security update
EUVD EUVD EUVD-2021-28224 loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.
Ubuntu USN Ubuntu USN USN-5092-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5092-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5096-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5106-1 Linux kernel (OEM) vulnerabilities
History

No history.