CVE-2021-41073

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10 through 5.14.6

Description The issue is related to a buffer overflow in the loop rw iter function in the Linux kernel's io uring subsystem, allowing local users to gain privileges. This is due to an error in the implementation of the io uring interface, leading to access to already freed memory blocks. The vulnerability can be exploited to create a working exploit, allowing for privilege escalation.

Recommendations For Linux kernel versions 5.10 through 5.14.6, update to a version that includes the patch for this issue. As a temporary workaround, consider restricting access to the io uring subsystem to minimize the risk of exploitation. Avoid using the loop rw iter() function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.