6.7
Moyenne
CVE-2021-23133 A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
Description
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux Kernel 5.12 | premières → < 5.12-rc8 | 5.12-rc8 |
Autres CVE de Linux Kernel
Les 11 CVE de Linux Kernel →
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems
6.9
Moyenne
CVE-2022-2327
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
7.5
Élevée
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
8.7
Élevée
CVE-2021-23134
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
7.8
Élevée