July 22, 2021
A second security hole has been discovered in the Linux kernel’s file system which allows any user to take over a computer.
This security hole is called Sequoia and it is being designated CVE-2021-33909.
Earlier this week the Linux systemd vulnerability was found which could knock out all systems.
The Qualys Research Team found the error in the filesystem and also discovered a size_ t-to-int type conversion vulnerability in the Linux kernel’s filesystem.
Not only can Sequoia be used against most Linux distributions in their default configurations, but it can also be abused by any unprivileged user to gain root privileges.
Although it is a major security threat, there are patches that can prevent it from attacking systems.
Linux kernel 3.16 through 5.13x before 5.13.4 patches can be used.
For more information, read the original story in ZDNet.
