PT-2021-2487 · Linux+3 · Linux Kernel+3

Syzbot · Published 2021-03-04 · Updated 2023-05-17 · CVE-2021-28951

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.11.8

Description: An issue in the Linux kernel allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start. The issue is caused by synchronization errors when using a shared resource in the fs/io uring.c file.

Recommendations: For Linux kernel versions through 5.11.8, update to a version later than 5.11.8 to resolve the issue. As a temporary workaround, consider restricting the use of the SQPOLL thread to minimize the risk of exploitation. Avoid using the affected fs/io uring.c file until the issue is resolved. At the moment, there is no other information about additional mitigation measures for this issue.

Exploit

Fix

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALT-PU-2021-1566

ALT-PU-2021-1609

ALT-PU-2021-1869

ALT-PU-2021-1888

ALT-PU-2021-1896

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

AZL-6539

BDU:2021-01863

CVE-2021-28951

MGASA-2021-0174

MGASA-2021-0175

USN-4948-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 130

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb · Exploit
• 🔥 https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit · Exploit
• 🔥 https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 · Exploit
• 🔥 https://github.com/r1is/CVE-2022-0847 · Exploit
• 🔥 https://github.com/imfiver/CVE-2022-0847 · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit
• 🔥 https://github.com/pqlx/CVE-2022-1015 · Exploit
• 🔥 https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md · Exploit
• 🔥 https://github.com/Al1ex/CVE-2022-0847 · Exploit