CVE-2021-44733

HIGH

Linux Kernel < 5.15.11 - Use-After-Free in TEE Shared Memory Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-44733. PoCs published by pjlantz.

AI-analyzed exploit summary This repository provides a detailed writeup and fuzzing description for CVE-2021-44733, a use-after-free vulnerability in the Linux kernel TEE subsystem up to version 5.15.11. It includes a syzkaller fuzzing configuration and an explanation of the exploitation process, though no full exploit code is present.

Description

A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object.

Exploits (1)

nomisec WRITEUP 76 stars

by pjlantz · poc

https://github.com/pjlantz/optee-qemu

View Code ZIP pw:eip

This repository provides a detailed writeup and fuzzing description for CVE-2021-44733, a use-after-free vulnerability in the Linux kernel TEE subsystem up to version 5.15.11. It includes a syzkaller fuzzing configuration and an explanation of the exploitation process, though no full exploit code is present.

Classification

Writeup 90%

Attack Type

Lpe

Complexity

Complex

Reliability

Theoretical

Target: Linux kernel TEE subsystem (up to 5.15.11)

No auth needed

Prerequisites: Access to a vulnerable Linux kernel with CONFIG_OPTEE enabled · Ability to interact with /dev/tee0 device

MITRE ATT&CK