cve/2021/CVE-2021-43267.md

CVE-2021-43267

Description

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

POC

Reference

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16

Github

• https://github.com/0x0021h/expbox
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Al1ex/LinuxEelvation
• https://github.com/DarkSprings/CVE-2021-43267-POC
• https://github.com/JlSakuya/Linux-Privilege-Escalation-Exploits
• https://github.com/aixcc-public/challenge-001-exemplar
• https://github.com/bcoles/kasld
• https://github.com/bsauce/kernel-exploit-factory
• https://github.com/bsauce/kernel-security-learning
• https://github.com/hardenedvault/ved
• https://github.com/kdn111/linux-kernel-exploitation
• https://github.com/khanhdn111/linux-kernel-exploitation
• https://github.com/khanhdz-06/linux-kernel-exploitation
• https://github.com/khanhdz191/linux-kernel-exploitation
• https://github.com/khanhhdz/linux-kernel-exploitation
• https://github.com/khanhhdz06/linux-kernel-exploitation
• https://github.com/khanhnd123/linux-kernel-exploitation
• https://github.com/knd06/linux-kernel-exploitation
• https://github.com/milot/dissecting-pkexec-cve-2021-4034
• https://github.com/ndk191/linux-kernel-exploitation
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/ohnonoyesyes/CVE-2021-43267
• https://github.com/soosmile/POC
• https://github.com/ssr-111/linux-kernel-exploitation
• https://github.com/xairy/linux-kernel-exploitation
• https://github.com/zzhacked/CVE-2021-43267