Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 9 Apr 2021 13:06:09 +0300
From: Alexander Popov <>
To: oss-security <>
 Linus Torvalds <>, Greg KH <>,
 "" <>,
 Norbert Slusarek <>,
 Stefano Garzarella <>, Eric Dumazet
 <>, Anthony Liguori <>,
 David Miller <>, Jakub Kicinski <>,
 Jorgen Hansen <>,
 Stefan Schmidt <>,
 Jeff Vander Stoep <>,
 Andrey Konovalov <>
Subject: Re: Linux kernel: Exploitable vulnerabilities in AF_VSOCK


I published a detailed article about exploiting CVE-2021-26708 in AF_VSOCK

In this article I describe how to gain local privilege escalation on Fedora 33
Server for x86_64, bypassing SMEP and SMAP.

The race condition may cause write-after-free of a 4-byte controlled value to a
64-byte kernel object at offset 40. That's quite limited memory corruption. I
had a hard time turning it into arbitrary read/write of kernel memory.

In this article I also describe possible exploit mitigations that could prevent
exploitation of CVE-2021-26708 or at least make it harder.

Best regards,

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.