03-05-2021 , 12:27 AM
Quote:The vulnerabilities could be exploited for local privilege escalation, as confirmed in experiments on Fedora 33 Server. The vulnerabilities, known together as CVE-2021-26708, have received a CVSS v3 base score of 7.0 (high severity).
These vulnerabilities result from race conditions that were implicitly added with [color=var(--theme-link_a)]virtual socket multi-transport support. They appeared in Linux kernel version 5.5 in November 2019. The vulnerable kernel drivers (CONFIG_VSOCKETS and CONFIG_VIRTIO_VSOCKETS) are shipped as kernel modules in all major GNU/Linux distributions. The vulnerable modules are automatically loaded when an AF_VSOCK socket is created. This ability is available to unprivileged users.[/color]
“I successfully developed a prototype exploit for local privilege escalation on Fedora 33 Server, bypassing x86_64 platform protections such as SMEP and SMAP. This research will lead to new ideas on how to improve Linux kernel security,” said Popov.
The researcher prepared the fixing patch and disclosed the vulnerabilities responsibly to the Linux kernel security team. The [color=var(--theme-link_a)]patch has been merged into mainline kernel version 5.11-rc7 and backported into affected stable trees.[/color]
Source