The vulnerability of the rcu_cblist_dequeue function in the rcu_segcblist.c module of the Linux kernel allows a attacker to increase their privileges.

🗓️ 28 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Privilege escalation via use-after-free in rcu_cblist_dequeue in rcu_segcblist.c Linux kernel.

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	CVE-2022-20153	15 Jun 202214:15	–	attackerkb
Tenable Nessus	Alibaba Cloud Linux 3 : 0125: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0125)	14 May 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-2654)	2 Nov 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2932)	28 Dec 202200:00	–	nessus
Tenable Nessus	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001737)	14 Jan 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004004)	16 Jan 202600:00	–	nessus
Tenable Nessus	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004771)	16 Jan 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-20153	5 Mar 202500:00	–	nessus
Android Security Bulletins	Pixel Update Bulletin—June 2022Stay organized with collectionsSave and categorize content based on your preferences.	6 Jun 202200:00	–	androidsecurity
CNNVD	Google Android 资源管理错误漏洞	6 Jun 202200:00	–	cnnvd

Source	Link
source	www.source.android.com/security/bulletin/pixel/2022-06-01
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/f70865db5ff35f5ed0c7e9ef63e7cca3d4947f04
cve	www.cve.org/CVERecord
web	www.web.nvd.nist.gov/view/vuln/detail

28 May 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 36.7

CVSS 26.8

EPSS0.00123

privilege escalation use after free read copy update cblist dequeue