ALT Linux Team

Package kernel-image-std-kvm update in sisyphus on 2021-09-28

ALT-PU-2021-2915-1

Package kernel-image-std-kvm updated to version 5.10.69-alt1 for branch sisyphus in task 286076.

Closed vulnerabilities

Published: 2022-02-09
Modified: 2023-08-14

BDU:2022-00681

Уязвимость функции loop_rw_iter (fs/io_uring.c ) ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.8) Vector: AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity: MEDIUM (6.0) Vector: AV:L/AC:H/Au:S/C:C/I:C/A:C
References:
Published: 2021-09-19
Modified: 2024-11-21

CVE-2021-41073

loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation.

Severity: HIGH (7.2) Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top