CVE-2021-41073

Description

loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation.

Affected Platforms

Weakness Type

CWE-763

References

• http://www.openwall.com/lists/oss-security/2021/09/18/2
• http://www.openwall.com/lists/oss-security/2021/09/18/2
• http://www.openwall.com/lists/oss-security/2021/09/18/2
• http://www.openwall.com/lists/oss-security/2021/09/18/2
• http://www.openwall.com/lists/oss-security/2022/06/04/4
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=16…