3 ms·

Here's the CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20226 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2022... For some reason t

• e12e 5y ago
  Thank you. But CVE seems to disagree with the headline? > The highest threat from this vulnerability is to data integrity, confidentiality and system availability. Or is this more of a "read/modify /etc/shadow or /sbin/su" kind of thing?
  • tptacek 5y ago
    As I read it: it's a kernel UAF; memory corruption, in the context of the kernel. There's a secondary attack vector related to the refcount mishandling, where you can obtain control of file table entries after an `execve`, even if you exec a SUID, which is also bad.