CVE-2021-41073
Summary
| CVE | CVE-2021-41073 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-09-19 17:15:00 UTC |
|---|
| Updated | 2023-11-07 03:38:00 UTC |
|---|
| Description | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 33 Update: kernel-headers-5.14.9-100.fc33 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| JavaScript is not available. |
MISC |
twitter.com |
|
| [SECURITY] Fedora 34 Update: kernel-tools-5.14.9-200.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| CVE-2021-41073 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| kernel/git/torvalds/linux.git - Linux kernel source tree |
MISC |
git.kernel.org |
|
| [SECURITY] Fedora 34 Update: kernel-tools-5.14.9-200.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| oss-security - Re: Linux Kernel: Exploitable vulnerability in io_uring |
MLIST |
www.openwall.com |
|
| [SECURITY] Fedora 33 Update: kernel-headers-5.14.9-100.fc33 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| oss-security - Linux Kernel: Exploitable vulnerability in io_uring |
MISC |
www.openwall.com |
|
| Debian -- Security Information -- DSA-4978-1 linux |
DEBIAN |
www.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 178809 Debian Security Update for linux (DSA 4978-1)
- 182620 Debian Security Update for linux (CVE-2021-41073)
- 198515 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5092-1)
- 198523 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5092-2)
- 198524 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5096-1)
- 198533 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5106-1)
- 281950 Fedora Security Update for kernel (FEDORA-2021-884d245ef8)
- 281956 Fedora Security Update for kernel (FEDORA-2021-e0d6215753)
- 352863 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2021-068
- 352864 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2021-067
- 352865 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2021-066
- 352866 Amazon Linux Security Advisory for kernel-livepatch: ALAS2LIVEPATCH-2021-065
- 353154 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-006
- 900371 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (5934)
- 901590 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (6596-1)
- 905885 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (5934-1)
