loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/<pid>/maps for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.68-62.173Upgrade kernel-livepatch-5.10.62-55.141-debuginfoUpgrade kernel-livepatch-5.10.50-44.131-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.59-52.142-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.50-44.132-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade perfUpgrade kernel-livepatch-5.10.50-44.131Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.50-44.132 | Nov 5, 2021 | Sep 19, 2021 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Sep 19, 2021 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-devel-azure | Oct 26, 2022 | Sep 19, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-virtualUpgrade linux-image-azure-edgeUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.10.0-1049-oemUpgrade linux-image-genericUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-37-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1017-azureUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-oem-20.04c | Sep 28, 2021 | Sep 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub