CVE-2021-41073
HIGH 7.8EPSS 1.8%
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 1.77% chance of exploitation in the next 30 days, 78th percentile
- Published
- 2021-09-19
- Updated
- 2024-08-04
Proof-of-concept exploits (3)
- chompie1337/Linux_LPE_io_uring_CVE-2021-41073101★ · 2022-03-08
- smallkirby/seccamp23c2-assets17★ · 2023-09-13
- WhatsWrongAndWhy/CVE-2021-410730★ · 2026-07-21
Security advisories
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=16c8d2df7ec…
- http://www.openwall.com/lists/oss-security/2021/09/18/2
- http://www.openwall.com/lists/oss-security/2022/06/04/4
- https://security.netapp.com/advisory/ntap-20211014-0003
- https://www.debian.org/security/2021/dsa-4978