PT-2021-1516 · Linux +5 · Linux Kernel +5

🗓️ 21 Jul 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 20 Views

Use-after-free in Linux kernel max3421-hcd causes denial of service and local escalation on USB removal; upgrade to 5.13.6.

Reporter	Title	Published	Views	Family All 26519
BDU FSTEC	The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.	23 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the joydevhandle_JSIOCSBTNMAP() function in the Red Hat Enterprise Linux operating system, which allows a hacker to cause a service failure or increase their privileges.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xen-netback component in the Linux operating system allows a hacker to increase their privileges or expose sensitive information.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to protected information.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the CAN BCM protocol in Linux kernel allows a hacker to increase their privileges.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `arch/arm/mach-footbridge/personal-pci.c` component of the Linux operating system allows a attacker to disclose sensitive information or cause service failures.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to execute arbitrary code.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to gain access to confidential information or cause a service failure.	6 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to information disclosure, allows attackers to gain access to confidential data.	6 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the fs/seq_file.c component of Linux operating systems allows a hacker to increase their privileges.	30 Jul 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2 - 9

CVSS 3.19.1 - 9.8

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.92621

SSVC