Privilege Escalation on GMO Flatt Security Research https://flatt.tech/research/tags/privilege-escalation/ Recent content in Privilege Escalation on GMO Flatt Security Research Hugo en Mon, 21 Jun 2021 00:00:00 +0000 CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring https://flatt.tech/research/posts/a-reference-counting-bug-which-leads-to-local-privilege-escalation-in-io-uring/ Mon, 21 Jun 2021 00:00:00 +0000 https://flatt.tech/research/posts/a-reference-counting-bug-which-leads-to-local-privilege-escalation-in-io-uring/ <p>Hello, I’m Shiga( <a href="https://twitter.com/Ga_ryo_" target="_blank" rel="noopener">@Ga_ryo_</a> ), a security engineer at Flatt Security Inc.</p> <p>In this article, I would like to give you a technical description of CVE-2021–20226( <a href="https://www.zerodayinitiative.com/advisories/ZDI-21-001/" target="_blank" rel="noopener">ZDI-2021–001</a> ) which is published before. I discovered this vulnerability and reported it to the vendor via the Zero Day Initiative. This article is not intended to inform you of the dangers of vulnerabilities, but to share tips from a technical point of view.</p> <p>An overview of the vulnerabilities and attack methods can be found at the links below. This blog will explain in a little more detail.</p>