Published: 19/09/2021 Updated: 07/11/2023

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 642

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 up to and including 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 10.0
fedoraproject fedora 33
fedoraproject fedora 34
netapp cloud backup -
netapp solidfire baseboard management controller -
netapp h410c_firmware -
netapp h300s_firmware -
netapp h500s_firmware -
netapp h700s_firmware -
netapp h300e_firmware -
netapp h500e_firmware -
netapp h700e_firmware -
netapp h410s_firmware -

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2020-3702 A flaw was found in the driver for Atheros IEEE 80211n family of chipsets (ath9k) allowing information disclosure CVE-2020-16119 Hadar Manor reported a use-after-free in the D ...

A flaw was found in loop_rw_iter in fs/io_uringc in the Linux kernel This problem gives the ability to a local user with a normal user privilege to free a user-defined kernel space buffer ...

loop_rw_iter in fs/io_uringc in the Linux kernel through 5146 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation ...

ALAS2LIVEPATCH-2021-068 Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2021-068 Advisory Release Date: 2021-11-03 22:50 P ...

A flaw was found in the Linux kernel When reusing a socket with an attached dccps_hc_tx_ccid as a listener, the socket will be used after being released leading to denial of service (DoS) or a potential code execution The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability (CVE-2020-1611 ...

ALAS2LIVEPATCH-2021-067 Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2021-067 Advisory Release Date: 2021-11-03 22:49 P ...

ALAS2LIVEPATCH-2021-066 Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2021-066 Advisory Release Date: 2021-11-03 22:49 P ...

ALAS2LIVEPATCH-2021-065 Amazon Linux 2 Security Advisory: ALASLIVEPATCH-2021-065 Advisory Release Date: 2021-11-03 22:48 P ...

oss-sec mailing list archives   By Date By Thread </form>    Linux Kernel: Exploitable vulnerability in io_uring   From: Valentina Pal ...

Assets used in lecture "手を動かして理解するLinux Kernel Exploit" at SecurityCamp2023.

SecurityCamp2023 Assets This repository provides the assets used in SecurityCamp2023 "C2 手を動かして理解するLinux Kernel Exploit" lecture Security Camp 2023 At Security Camp 2023 organized mainly by IPA, we learned the basics of userland/kernel exploit This repository hosts all the assets used during the lecture I had This lecture was centered on CVE-202

Linux_LPE_io_uring_CVE-2021-41073 LPE exploit for CVE-2021-41073 io_uring type confusion vulnerability Checkout the writeup Put an io_uring on it: Exploiting the Linux Kernel author: @chompie1337 For educational/research purposes only Not for use on testing or security evaulations To build (requires liburing): gcc -o hello helloc -Wall -std=gnu99 `pkg-config fuse --cflags

CWE-763 http://www.openwall.com/lists/oss-security/2021/09/18/2 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=16c8d2df7ec0eed31b7d3b61cb13206a7fb930cc https://www.debian.org/security/2021/dsa-4978 https://security.netapp.com/advisory/ntap-20211014-0003/http://www.openwall.com/lists/oss-security/2022/06/04/4 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAP4TXEZ7J4EZQMQW5SIJMWXG7WZT3F7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J7KSMIOQ4377CVTHMWNGNCWHMCRFRP2T/https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4978 https://github.com/smallkirby/seccamp23c2-assets

CVE-2021-41073

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect