Vulnerability in the io_uring subsystem of the Linux kernel allows privilege escalation.
A vulnerability (CVE-2021-41073) has been discovered in the Linux kernel, allowing a local user to elevate their privileges in the system. The issue stems from an error in the implementation of the asynchronous input/output io_uring interface, leading to a call to a memory block that has already been freed. It is noted that the researcher was able to achieve memory release at a specified offset while manipulating the loop_rw_iter() function as an unprivileged user, making it possible to create a working […]
