New Linux kernel bug lets you get root on most modern distros

guest · Jul 20, 2021

New Linux kernel bug lets you get root on most modern distros
July 20, 2021
https://www.bleepingcomputer.com/ne...bug-lets-you-get-root-on-most-modern-distros/

Unprivileged attackers can gain root privileges by exploiting a local privilege escalation (LPE) vulnerability in default configurations of the Linux Kernel's filesystem layer on vulnerable devices.

As discovered by Qualys researchers, the LPE security flaw tracked as CVE-2021-33909 (dubbed Sequoia) is present in the filesystem layer used to manage user data, a feature universally used by all major (Linux) operating systems.
According to Qualys' research, the vulnerability impacts all Linux kernel versions released since 2014.
Click to expand...

Once successfully exploited on a vulnerable system, the attackers get full root privileges on default installations of many modern distributions.

"We successfully exploited this uncontrolled out-of-bounds write, and obtained full root privileges on default installations of Ubuntu 20.04, Ubuntu 20.10, Ubuntu 21.04, Debian 11, and Fedora 34 Workstation," the researchers said.
They also added that "other Linux distributions are certainly vulnerable, and probably exploitable."
Click to expand...

Qualys: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909)

The Qualys Research Team has discovered a size_t-to-int type conversion vulnerability in the Linux Kernel’s filesystem layer affecting most Linux operating systems. Any unprivileged user can gain root privileges on a vulnerable host by exploiting this vulnerability in a default configuration.
Click to expand...

NormanF · Jul 22, 2021

Exactly why Linux users never run root, except when they really need to elevate.

Log in or Sign up

New Linux kernel bug lets you get root on most modern distros

guest Guest

NormanF Registered Member

Log in or Sign up

New Linux kernel bug lets you get root on most modern distros

guest Guest

NormanF Registered Member

Useful Searches