CVE-2021-4154
HIGHLinux Kernel >=5.1 <5.4.134 - Use-After-Free in cgroup v1 Parser
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-4154. PoCs published by Markakd, veritas501.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2021-4154, a use-after-free vulnerability in the Linux kernel's filesystem layer. The exploit leverages race conditions and memory manipulation to achieve local privilege escalation (LPE) on vulnerable kernels.
Description
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
Exploits (2)
This repository contains a working proof-of-concept exploit for CVE-2021-4154, a use-after-free vulnerability in the Linux kernel's filesystem layer. The exploit leverages race conditions and memory manipulation to achieve local privilege escalation (LPE) on vulnerable kernels.
This is a working exploit for CVE-2021-4154, a use-after-free vulnerability in the Linux kernel's fsconfig syscall. The PoC leverages race conditions and namespace isolation to achieve local privilege escalation by corrupting file descriptors.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H