CVE-2021-26708 is a local privilege escalation vulnerability in the Linux kernel, specifically affecting versions prior to 5.10.13, and also impacting NetApp products. It stems from multiple race conditions within the AF_VSOCK implementation due to incorrect locking mechanisms. This vulnerability carries a CVSS score of 7.0 (HIGH), indicating that a low-privileged local attacker can achieve high impact on confidentiality, integrity, and availability with high attack complexity. While not listed in CISA's KEV catalog, there is public exploit intelligence, including a detailed write-up on exploiting it, and significant community discussion with 5 mentions, indicating active interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.5, < 5.10.13CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:fas_baseboard_management_controller:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.
Feb 9, 2021kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c
Feb 5, 2021