CVE-2021-33909
published 2021-07-20CVE-2021-33909: fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an…
PriorityP351high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
9.73%
95.0th percentile
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
Affected
37 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | linux | < linux 5.10.46-2 (bookworm) | linux 5.10.46-2 (bookworm) |
| fedoraproject | fedora | — | — |
| android | — | — | |
| linux | linux_kernel | >= 0 < 5.10.46-2 | 5.10.46-2 |
| linux | linux_kernel | >= 0 < 5.10.46-2 | 5.10.46-2 |
| linux | linux_kernel | >= 0 < 5.10.46-2 | 5.10.46-2 |
| linux | linux_kernel | >= 0 < 5.10.46-2 | 5.10.46-2 |
| linux | linux_kernel | >= 0 < 4.15.0-151.157 | 4.15.0-151.157 |
| linux | linux_kernel | >= 0 < 5.4.0-80.90 | 5.4.0-80.90 |
| linux | linux_kernel | >= 0 < 4.4.0-212.244 | 4.4.0-212.244 |
| linux | linux_kernel | >= 0 < 4.4.0-214.246 | 4.4.0-214.246 |
| linux | linux_kernel | >= 0 < 4.4.0-218.251 | 4.4.0-218.251 |
| linux | linux_kernel | >= 0 < 4.15.0-151.157 | 4.15.0-151.157 |
| linux | linux_kernel | >= 0 < 4.15.0-156.163 | 4.15.0-156.163 |
| linux | linux_kernel | >= 0 < 4.15.0-166.174 | 4.15.0-166.174 |
| linux | linux_kernel | >= 0 < 5.4.0-80.90 | 5.4.0-80.90 |
| linux | linux_kernel | >= 0 < 5.4.0-84.94 | 5.4.0-84.94 |
| linux | linux_kernel | >= 0 < 5.4.0-92.103 | 5.4.0-92.103 |
| linux | linux_kernel | >= 3.12.43 < 3.13 | 3.13 |
| linux | linux_kernel | >= 3.16 < 4.4.276 | 4.4.276 |
| linux | linux_kernel | >= 4.10 < 4.14.240 | 4.14.240 |
| linux | linux_kernel | >= 4.15 < 4.19.198 | 4.19.198 |
| linux | linux_kernel | >= 4.20 < 5.4.134 | 5.4.134 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_ubuntu8.3HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_oracle7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC
cisa_ics·2024-03-14
Siemens SIMATIC
ICS Advisory
##
Siemens SIMATIC
Release DateMarch 14, 2024
Alert CodeICSA-24-074-07
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC
- Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Missing Encryption of Sensitive Data, Incorrect Permission Assignment for Critical Resource, Expected Beha
Palo Alto
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
vendor_paloalto·2024-02-14·CVSS 9.8
CVE-2017-18342 [CRITICAL] PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the
CVEs: CVE-2017-18342, CVE-2017-8923, CVE-2017-9120, CVE-2019-1551, CVE-2019-16865, CVE-2019-16905, CVE-2019-19523, CVE-2019-19528, CVE-2019-19911, CVE-2020-0404, CVE-2020-0431, CVE-2020-0466, CVE-2020-10379, CVE-2020-11538, CVE-2020-11608, CVE-2020-12114, CVE-2020-12321, CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-13757, CVE-2020-14314, CVE-2020-14351, CVE-2020-15778, CVE-2020-1967, CVE-2020-24394, CVE-2020-24504, CVE-2020-25211, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25717, CVE-2020-26541, CVE-2020-2715
Oracle
Oracle Oracle Communications Risk Matrix: Core (Kernel) — CVE-2021-33909
vendor_oracle·2022-01-15·CVSS 7.8
CVE-2021-33909 [HIGH] Oracle Oracle Communications Risk Matrix: Core (Kernel) — CVE-2021-33909
Oracle Oracle Communications Risk Matrix: Core (Kernel) vulnerability
CVE: CVE-2021-33909
CVSS: 7.8
Protocol: None
Remote exploit: No
Affected versions: Local
Advisory: cpujan2022 (JAN 2022)
Ubuntu
Kernel Live Patch Security Notice
vendor_ubuntu·2022-01-06·CVSS 7.8
CVE-2021-33909 [HIGH] Kernel Live Patch Security Notice
Title: Kernel Live Patch Security Notice
Summary: Several security issues were fixed in the kernel.
The BPF subsystem in the Linux kernel before 4.17 mishandles
situations with a long jump over an instruction sequence where inner
instructions require substantial expansions into multiple BPF instructions,
leading to an overflow. This affects kernel/bpf/core.c and
net/core/filter.c.(CVE-2018-25020)
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host's physical memory.(CVE-2021-3653)
Nadav Amit discovered that the hugetlb implementation in the Linux kernel
did not perform TLB flushes under
Android
CVE-2021-33909: Filesystem
vendor_android·2021-12-01·CVSS 7.8
CVE-2021-33909 [HIGH] CVE-2021-33909: Filesystem
Android Security Bulletin 2021-12-01
CVE: CVE-2021-33909
Severity: HIGH
Type: EoP
Component: Filesystem
References: A-195082750
Upstream kernel
Ubuntu
Kernel Live Patch Security Notice
vendor_ubuntu·2021-09-13·CVSS 8.3
CVE-2021-3653 [HIGH] Kernel Live Patch Security Notice
Title: Kernel Live Patch Security Notice
Summary: Several security issues were fixed in the kernel.
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host's physical memory.(CVE-2021-3653)
Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor
implementation for AMD processors in the Linux kernel allowed a guest VM to
disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a
guest VM could use this to read or write portions of the host's physical
memory.(CVE-2021-3656)
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel
contained an out-of-bo
Ubuntu
Kernel Live Patch Security Notice
vendor_ubuntu·2021-07-26·CVSS 7.8
CVE-2021-3600 [HIGH] Kernel Live Patch Security Notice
Title: Kernel Live Patch Security Notice
Summary: Several security issues were fixed in the kernel.
It was discovered that the eBPF implementation in the Linux kernel did not
properly track bounds information for 32 bit registers when performing div
and mod operations. A local attacker could use this to possibly execute
arbitrary code.(CVE-2021-3600)
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code.(CVE-2021-33909)
Ubuntu
Linux kernel vulnerability
vendor_ubuntu·2021-07-20
CVE-2021-33909 Linux kernel vulnerability
Title: Linux kernel vulnerability
Summary: The system could be made to run programs as an administrator.
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code.
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
lin
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2021-07-20·CVSS 4.2
CVE-2021-33909 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly perform access control. An authenticated attacker could possibly
use this to expose sensitive information. (CVE-2020-26558, CVE-2021-0129)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version numbe
Red Hat
kernel: size_t-to-int conversion vulnerability in the filesystem layer
vendor_redhat·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] CWE-787 kernel: size_t-to-int conversion vulnerability in the filesystem layer
kernel: size_t-to-int conversion vulnerability in the filesystem layer
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
An out-of-bounds write flaw was found in the Linux kernel's seq_file in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash, leak of internal kernel information and can escalate privileges. The issue results from not validating the size_t-to-int conversion prior to performing operations. The highest threat from this vulnerability is to data integrity, confidentiality and system availabili
Ubuntu
Linux kernel (OEM) vulnerabilities
vendor_ubuntu·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] Linux kernel (OEM) vulnerabilities
Title: Linux kernel (OEM) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Michael Brown discovered that the Xen netback driver in the Linux kernel
did not properly handle malformed packets from a network PV frontend,
leading to a use-after-free vulnerability. An attacker in a guest VM could
use this to cause a denial of service or possibly execute arbitrary code.
(CVE-2021-28691)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle HCI device initialization fai
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2021-07-20·CVSS 3.5
CVE-2021-0129 [LOW] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel
did not properly enforce limits for pointer operations. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2021-33200)
Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did
not properly clear received fragments from memory in some situations. A
physically proximate attacker c
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2021-07-20·CVSS 7.8
CVE-2021-33034 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Or Cohen and Nadav Markus discovered a use-after-free vulnerability in the
nfc implementation in the Linux kernel. A privileged local attacker could
use this issue to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2021-23134)
It was discovered that a race condition in the kernel Bluetooth subsystem
could lead to use-after-free of slab objects. An attacker could use this
issue to possibly execute a
Microsoft
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations leading to an integer overflow an Out-of-bounds Write and escalation to root by an
vendor_msrc·2021-07-13·CVSS 7.8
CVE-2021-33909 [HIGH] CWE-787 fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations leading to an integer overflow an Out-of-bounds Write and escalation to root by an
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations leading to an integer overflow an Out-of-bounds Write and escalation to root by an unprivileged user aka CID-8cae8cd89f05.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional pr
Debian
CVE-2021-33909: linux - fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not pro...
vendor_debian·2021·CVSS 7.8
CVE-2021-33909 [HIGH] CVE-2021-33909: linux - fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not pro...
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
Scope: local
bookworm: resolved (fixed in 5.10.46-2)
bullseye: resolved (fixed in 5.10.46-2)
forky: resolved (fixed in 5.10.46-2)
sid: resolved (fixed in 5.10.46-2)
trixie: resolved (fixed in 5.10.46-2)
GHSA
GHSA-6g4v-3wmh-w3jg: fs/seq_file
ghsa_unreviewed·2022-05-24
CVE-2021-33909 [HIGH] CWE-120 GHSA-6g4v-3wmh-w3jg: fs/seq_file
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
OSV
Kernel Live Patch Security Notice
osv·2022-01-06·CVSS 7.8
CVE-2018-25020 [HIGH] Kernel Live Patch Security Notice
Kernel Live Patch Security Notice
The BPF subsystem in the Linux kernel before 4.17 mishandles
situations with a long jump over an instruction sequence where inner
instructions require substantial expansions into multiple BPF instructions,
leading to an overflow. This affects kernel/bpf/core.c and
net/core/filter.c.(CVE-2018-25020)
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host's physical memory.(CVE-2021-3653)
Nadav Amit discovered that the hugetlb implementation in the Linux kernel
did not perform TLB flushes under certain conditions. A local attacker
could use this to leak or alte
OSV
Kernel Live Patch Security Notice
osv·2021-09-13·CVSS 7.8
CVE-2021-3653 [HIGH] Kernel Live Patch Security Notice
Kernel Live Patch Security Notice
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host's physical memory.(CVE-2021-3653)
Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor
implementation for AMD processors in the Linux kernel allowed a guest VM to
disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a
guest VM could use this to read or write portions of the host's physical
memory.(CVE-2021-3656)
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel
contained an out-of-bounds write in its setsockopt() implementation. A
local attacker cou
OSV
Kernel Live Patch Security Notice
osv·2021-07-26·CVSS 7.8
CVE-2021-3600 [HIGH] Kernel Live Patch Security Notice
Kernel Live Patch Security Notice
It was discovered that the eBPF implementation in the Linux kernel did not
properly track bounds information for 32 bit registers when performing div
and mod operations. A local attacker could use this to possibly execute
arbitrary code.(CVE-2021-3600)
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code.(CVE-2021-33909)
OSV
linux-oem-5.10 vulnerabilities
osv·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] linux-oem-5.10 vulnerabilities
linux-oem-5.10 vulnerabilities
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Michael Brown discovered that the Xen netback driver in the Linux kernel
did not properly handle malformed packets from a network PV frontend,
leading to a use-after-free vulnerability. An attacker in a guest VM could
use this to cause a denial of service or possibly execute arbitrary code.
(CVE-2021-28691)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle HCI device initialization failure, leading to a double-free
vulnerability. An attacker could use this to c
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.
osv·2021-07-20·CVSS 4.2
[MEDIUM] linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly perform access control. An authenticated attacker could possibly
use this to expose sensitive information. (CVE-2020-26558, CVE-2021-0129)
OSV
linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities
osv·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities
linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Or Cohen and Nadav Markus discovered a use-after-free vulnerability in the
nfc implementation in the Linux kernel. A privileged local attacker could
use this issue to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2021-23134)
It was discovered that a race condition in the kernel Bluetooth subsystem
could lead to use-after-fre
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
osv·2021-07-20·CVSS 3.5
CVE-2021-33909 [LOW] linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the virtual file system implementation in the Linux
kernel contained an unsigned to signed integer conversion error. A local
attacker could use this to cause a denial of service (system crash) or
execute arbitrary code. (CVE-2021-33909)
Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel
did not properly enforce limits for pointer operations. A local attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2021-33200)
Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did
not properly clear received fra
OSV
CVE-2021-33909: fs/seq_file
osv·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] CVE-2021-33909: fs/seq_file
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05.
No detection rules found.
No public exploits indexed.
Checkpoint
26th July – Threat Intelligence Report
blogs_checkpoint·2021-07-26·CVSS 10.0
CVE-2019-11510 [CRITICAL] 26th July – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 26th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 26th July, please download our Threat Intelligence Bulletin .
Top Attacks and Breaches
US officials have reported that Chinese state-sponsored threat actors successfully breached 13 US oil and natural gas pipeline companies between 2011 and 2013. The hackers gained initial access using a spear-phishing campaign, and their main goal was to gain strategic access and disrupt US pipeline operations.
The French Natio
Qualys
CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1) | Qualys
blogs_qualys·2021-07-20·CVSS 7.8
CVE-2021-33910 [HIGH] CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1) | Qualys
#### Table of Contents
- About systemd
- Impact
- Disclosure Timeline
- Technical Details
- Solution
- Qualys Coverage
- Discover Vulnerable Linux Servers Using Qualys VMDR
- Prioritize Based on RTIs
- Detect Impacted Assets with Threat Protection
- Dashboard
- Vendor References
- Frequently Asked Questions (FAQs)
The Qualys Research Team has discovered a stack exhaustion denial-of-service vulnerability in systemd, a near-ubiquitous utility available on major Linux operating systems. Any unprivileged user can exploit this vulnerability to crash systemd and hence the entire operating system (a kernel panic).
## About systemd
`systemd` is a software suite that’s included in most Linux-based OSes. It provides an array of system components for Linux operating systems. It provides a system
Qualys
Sequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909) | Qualys
blogs_qualys·2021-07-20·CVSS 7.8
CVE-2021-33909 [HIGH] Sequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909) | Qualys
#### Table of Contents
- About Linux Filesystem
- Impact
- Disclosure Timeline
- Proof of Concept Video
- Technical Details
- Solution
- Qualys Coverage
- Discover Vulnerable Linux Servers Using Qualys VMDR
- Dashboard
- Vendor References
- Frequently Asked Questions (FAQs)
The Qualys Research Team has discovered a size_t-to-int type conversion vulnerability in the Linux Kernel’s filesystem layer affecting most Linux operating systems. Any unprivileged user can gain root privileges on a vulnerable host by exploiting this vulnerability in a default configuration.
## About Linux Filesystem
A file system is an organization of data and metadata on a storage device. It controls how the data is stored and retrieved, and its most important function is to manage user data. The Linux file syste
Qualys
CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1)
blogs_qualys·2021-07-20·CVSS 7.8
[HIGH] CVE-2021-33910: Denial of Service (Stack Exhaustion) in systemd (PID 1)
## Table of Contents
About systemd
Impact
Disclosure Timeline
Technical Details
Solution
Qualys Coverage
Discover Vulnerable Linux Servers Using Qualys VMDR
Prioritize Based on RTIs
Detect Impacted Assets with Threat Protection
Dashboard
Vendor References
Frequently Asked Questions (FAQs)
The Qualys Research Team has discovered a stack exhaustion denial-of-service vulnerability in systemd, a near-ubiquitous utility available on major Linux operating systems. Any unprivileged user can exploit this vulnerability to crash systemd and hence the entire operating system (a kernel panic).
## About systemd
systemd
## Impact
This vulnerability was introduced in systemd v220 (April 2015) by commit 7410616c (“core: rework unit name validation and manipulation logic”), which replaced
Qualys
Sequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909)
blogs_qualys·2021-07-20·CVSS 7.8
[HIGH] Sequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer (CVE-2021-33909)
## Table of Contents
About Linux Filesystem
Impact
Disclosure Timeline
Proof of Concept Video
Technical Details
Solution
Qualys Coverage
Discover Vulnerable Linux Servers Using Qualys VMDR
Dashboard
Vendor References
Frequently Asked Questions (FAQs)
The Qualys Research Team has discovered a size_t-to-int type conversion vulnerability in the Linux Kernel’s filesystem layer affecting most Linux operating systems. Any unprivileged user can gain root privileges on a vulnerable host by exploiting this vulnerability in a default configuration.
## About Linux Filesystem
A file system is an organization of data and metadata on a storage device. It controls how the data is stored and retrieved, and its most important function is to manage user data. The Linux file system interface is
http://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.htmlhttp://packetstormsecurity.com/files/163671/Kernel-Live-Patch-Security-Notice-LSN-0079-1.htmlhttp://packetstormsecurity.com/files/164155/Kernel-Live-Patch-Security-Notice-LSN-0081-1.htmlhttp://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.htmlhttp://www.openwall.com/lists/oss-security/2021/07/22/7http://www.openwall.com/lists/oss-security/2021/08/25/10http://www.openwall.com/lists/oss-security/2021/09/17/2http://www.openwall.com/lists/oss-security/2021/09/17/4http://www.openwall.com/lists/oss-security/2021/09/21/1https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4https://github.com/torvalds/linux/commit/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53bhttps://lists.debian.org/debian-lts-announce/2021/07/msg00014.htmlhttps://lists.debian.org/debian-lts-announce/2021/07/msg00015.htmlhttps://lists.debian.org/debian-lts-announce/2021/07/msg00016.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4UHHIGISO3FVRF4CQNJS4IKA25ATSFU/https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015https://security.netapp.com/advisory/ntap-20210819-0004/https://www.debian.org/security/2021/dsa-4941https://www.openwall.com/lists/oss-security/2021/07/20/1https://www.oracle.com/security-alerts/cpujan2022.htmlhttp://packetstormsecurity.com/files/163621/Sequoia-A-Deep-Root-In-Linuxs-Filesystem-Layer.htmlhttp://packetstormsecurity.com/files/163671/Kernel-Live-Patch-Security-Notice-LSN-0079-1.htmlhttp://packetstormsecurity.com/files/164155/Kernel-Live-Patch-Security-Notice-LSN-0081-1.htmlhttp://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.htmlhttp://www.openwall.com/lists/oss-security/2021/07/22/7http://www.openwall.com/lists/oss-security/2021/08/25/10http://www.openwall.com/lists/oss-security/2021/09/17/2http://www.openwall.com/lists/oss-security/2021/09/17/4http://www.openwall.com/lists/oss-security/2021/09/21/1https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4https://github.com/torvalds/linux/commit/8cae8cd89f05f6de223d63e6d15e31c8ba9cf53bhttps://lists.debian.org/debian-lts-announce/2021/07/msg00014.htmlhttps://lists.debian.org/debian-lts-announce/2021/07/msg00015.htmlhttps://lists.debian.org/debian-lts-announce/2021/07/msg00016.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4UHHIGISO3FVRF4CQNJS4IKA25ATSFU/https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015https://security.netapp.com/advisory/ntap-20210819-0004/https://www.debian.org/security/2021/dsa-4941https://www.openwall.com/lists/oss-security/2021/07/20/1https://www.oracle.com/security-alerts/cpujan2022.html
2021-07-20
Published