PRIOn knowledge basePRION:CVE-2021-32606Privilege escalation
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.3%
In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedora | eq | 32 | |
| fedora | eq | 33 | |
| fedora | eq | 34 | |
| linux_kernel | ge | 5.11 | |
| linux_kernel | lt | 5.12.9 |
References
www.openwall.com/lists/oss-security/2021/05/12/1
www.openwall.com/lists/oss-security/2021/05/13/2
www.openwall.com/lists/oss-security/2021/05/14/1
www.openwall.com/lists/oss-security/2021/05/28/1
lists.fedoraproject.org/archives/list/[email protected]/message/73D53S4IZFPFQMRABMXXLW4AJK3EULDX/
lists.fedoraproject.org/archives/list/[email protected]/message/GI7Z7UBWBGD3ABNIL2DC7RQDCGA4UVQW/
lists.fedoraproject.org/archives/list/[email protected]/message/HD3NJBG25AADVGPRC63RX2JOQBMPSWK4/
security.netapp.com/advisory/ntap-20210625-0001/
www.openwall.com/lists/oss-security/2021/05/11/16
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.4 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
12.3%