First Last Prev Next    This bug is not in your last search results.
Bug 1198445 - (CVE-2021-39802) VUL-1: CVE-2021-39802: kernel-source: local privilege escalation in change_pte_range of mprotect.c
(CVE-2021-39802)
VUL-1: CVE-2021-39802: kernel-source: local privilege escalation in change_pt...
Status: RESOLVED INVALID
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P5 - None : Minor
: ---
Assigned To: Security Team bot
Security Team bot
https://smash.suse.de/issue/328854/
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2022-04-13 09:29 UTC by Gabriele Sonnu
Modified: 2022-04-13 10:58 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Gabriele Sonnu 2022-04-13 09:29:16 UTC 
In change_pte_range of mprotect.c , there is a possible way to make a shared
mmap writable due to a permissions bypass. This could lead to local escalation
of privilege with no additional execution privileges needed. User interaction is
not needed for exploitation.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-39802
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39802
https://source.android.com/security/bulletin/2022-04-01
Comment 1 Gabriele Sonnu 2022-04-13 09:31:53 UTC 
Android-only issue, the patch introducing the vulnerability was never merged in Linus' tree due to security concerns [0]. 
Our product are not affected. Closing.

[0] https://lore.kernel.org/all/CAHk-=wj4KCujAH_oPh40Bkp48amM4MXr+8AcbZ=qd5LF4Q+TDg@mail.gmail.com/#t
First Last Prev Next    This bug is not in your last search results.