CVE-2021-42008 – Linux Foundation / Linux kernel – Out-of-bounds write

CVE-2021-42008 is an out-of-bounds write vulnerability impacting Linux kernel versions 5.13.12 and earlier. An exploit was observed in open source and a link to an exploit was shared in the underground. Additionally, a walk-through demo of an exploit was shared via YouTube.

Summary:

CVE-2021-42008 is an out-of-bounds write vulnerability impacting Linux kernel versions 5.13.12 and earlier. An exploit was observed in open source and a link to an exploit was shared in the underground. Additionally, a walk-through demo of an exploit was shared via YouTube.

PoC Links(if available):

YouTube: Privilege escalation on latest Ubuntu kernel –
https://www.youtube.com/watch?v=d5f9xLK8Vhw&ab_channel=zhandai

Known Counter Measures:

The Linux Foundation addressed the vulnerability in Linux kernel versions 5.13.13.

Links to patches(if available)

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13