PT-2021-1516 · Linux +5 · Linux Kernel +5

🗓️ 21 Jul 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 27 Views

Use-after-free in Linux kernel max3421-hcd causes denial of service and local escalation on USB removal; upgrade to 5.13.6.

Reporter	Title	Published	Views	Family All 26416
BDU FSTEC	The vulnerability of the rtr_recvmsg function in the Linux operating system allows a hacker to obtain confidential information.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the BPF subsystem of the `map_create` or `check_btf_info` function of the Linux kernel allows a malicious actor to cause an unexpected termination of the application.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `tipc_nl_retrieve_key` function in the Linux operating system allows a hacker to cause a service failure.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the kernel/bpf/verifier.c component of the Linux operating system allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the Extensible Authentication Protocol over LAN (EAPOL) on the NetBSD operating system allows a perpetrator to induce a service failure.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges	9 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the Linux operating system allows attackers to compromise the integrity of protected information.	23 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.	23 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the joydevhandle_JSIOCSBTNMAP() function in the Red Hat Enterprise Linux operating system, which allows a hacker to cause a service failure or increase their privileges.	25 Jun 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2 - 9

CVSS 3.19.1 - 9.8

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.92621

SSVC