PT-2020-6654 · Linux +5 · Linux Kernel +5

🗓️ 02 Nov 2020 00:00:00Reported by Positive TechnologiesType

PT-2020-6654: Linux kernel use-after-free from refcount leak in llcp sock connect; privilege escalation risk; no fix yet.

Reporter	Title	Published	Views	Family All 15775
altlinux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.121-alt1	15 Jun 202200:00	–	altlinux
attackerkb	CVE-2020-27170	20 Mar 202122:15	–	attackerkb
attackerkb	CVE-2021-28660	17 Mar 202115:15	–	attackerkb
attackerkb	CVE-2021-3506	19 Apr 202122:15	–	attackerkb
attackerkb	CVE-2021-3178	19 Jan 202107:15	–	attackerkb
attackerkb	CVE-2021-3679	5 Aug 202120:15	–	attackerkb
attackerkb	CVE-2021-3653	29 Sep 202120:15	–	attackerkb
attackerkb	CVE-2021-3659	22 Aug 202215:15	–	attackerkb
attackerkb	CVE-2021-3348	1 Feb 202104:15	–	attackerkb
attackerkb	CVE-2021-33656	18 Jul 202215:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

12 Feb 2023 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8 - 9.8

CVSS 28.3

CVSS 37.4 - 8.8

CVSS 48.7

EPSS0.89063

SSVC