CVE-2021-26708

HIGH

7.0

Beschreibung

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

CVE Details

CVSS v3.1 Bewertung7.0

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht2/5/2021

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

linux:linux_kernelnetapp:500fnetapp:a250netapp:aff_baseboard_management_controllernetapp:baseboard_management_controller_500f_firmwarenetapp:baseboard_management_controller_a250_firmwarenetapp:cloud_backupnetapp:fas_baseboard_management_controllernetapp:hci_h410cnetapp:hci_h410c_firmwarenetapp:solidfire_\&_hci_management_nodenetapp:solidfire_baseboard_management_controller

Schwachen (CWE)

CWE-667

Referenzen

http://www.openwall.com/lists/oss-security/2021/02/05/6(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2021/04/09/2(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2022/01/25/14(cve@mitre.org)

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13(cve@mitre.org)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446(cve@mitre.org)

https://security.netapp.com/advisory/ntap-20210312-0008/(cve@mitre.org)

https://www.openwall.com/lists/oss-security/2021/02/04/5(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2021/02/05/6(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2021/04/09/2(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2022/01/25/14(af854a3a-2127-422b-91ae-364da2661108)

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20210312-0008/(af854a3a-2127-422b-91ae-364da2661108)

https://www.openwall.com/lists/oss-security/2021/02/04/5(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.