PT-2020-2429 · Linux +7 · Linux Kernel +7

🗓️ 14 Apr 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Use-after-free in sg write of Linux kernel before 5.6.11 may enable code execution.

Reporter	Title	Published	Views	Family All 27656
BDU FSTEC	The vulnerability of the vgem_gem_dumb_create function in Linux kernel allows a hacker to execute arbitrary code.	22 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kernel of the FireDTV driver in the Linux operating system allows a hacker to trigger an emergency shutdown of the system and compromise the confidentiality and integrity of the protected information.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the llcp_sock_connect() function in the Linux operating system, which allows a hacker to increase their privileges	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the asynchronous input/output interface io_uring in Linux kernel allows a attacker to cause memory corruption and elevate their privileges to root level.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to gain access to confidential information or cause a service failure.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the llcp_sock_bind() function in the NFC protocol of the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the llcp_sock_connect() function in the NFC protocol of the Linux operating system allows a hacker to trigger a service failure.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the ICMP protocol in Linux kernel allows a attacker to access confidential information.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the prealloc_elems_and_frealist function (kernel/bpf/stackmap.c) in the Linux operating system’s kernel, which allows an attacker to access confidential information or cause a service failure	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the route4_change() function (net/sched/cls_route.c) in the Linux operating system allows a attacker to access confidential information or cause service failures.	26 May 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/Liang2580/CVE-2021-33909
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19319
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19318

24 Jan 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26.8 - 9.3

CVSS 3.18.8 - 9.8

CVSS 37.8 - 8.8

CVSS 48.7

EPSS0.78684

SSVC