Published on: 21 July 2021
Multiple vulnerabilities were found in major Linux distributions including Debian, RedHat, SUSE and Ubuntu. A local authenticated attacker may leverage the vulnerabilities to gain root privilege or cause denial of service on a vulnerable system.
Reports indicate that the proof-of-concept (PoC) code for vulnerabilities (CVE-2021-33909 and CVE-2021-33910) are publicly available. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
It is strongly recommended to consult the product vendors if the used Linux systems are affected.
Successful exploitation could lead to escalation of privilege or denial of service on a vulnerable system.
The vulnerabilities are fixed in some of the Linux distributions such as RedHat and Ubuntu. The following is only a sample list of Linux distributions that are affected. The list is not exhaustive and it is strongly recommended to consult the product vendors if the used Linux systems are affected. System administrators should check with their product vendors to confirm if their Linux systems are affected and the availability of patches, and if so, apply the patches or follow the recommendations provided by the product vendors to mitigate the risk.