An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task.

🗓️ 08 Nov 2021 08:00:00Reported by MicrosoftType

Use-after-free in Linux kernel before 5.14.8 via SELinux traceme handler enables local privilege escalation.

Reporter	Title	Published	Views	Family All 188
attackerkb	CVE-2021-43057	28 Oct 202104:15	–	attackerkb
bdu_fstec	The vulnerability of the selinux_ptracetraceme() function in Linux operating systems allows a hacker to cause a service failure or enhance their privileges.	7 Dec 202100:00	–	bdu_fstec
cbl_mariner	CVE-2021-43057 affecting package kernel 5.10.168.1-1	17 Dec 202120:10	–	cbl_mariner
cbl_mariner	CVE-2021-43057 affecting package kernel for versions less than 5.15.2.1-1	9 Apr 202206:52	–	cbl_mariner
cnnvd	Linux kernel 资源管理错误漏洞	28 Oct 202100:00	–	cnnvd
cnvd	Linux kernel post-release reuse vulnerability (CNVD-2021-94903)	29 Oct 202100:00	–	cnvd
cve	CVE-2021-43057	28 Oct 202103:36	–	cve
cvelist	CVE-2021-43057	28 Oct 202103:36	–	cvelist
debiancve	CVE-2021-43057	28 Oct 202103:36	–	debiancve
euvd	EUVD-2021-30010	3 Oct 202520:07	–	euvd