PT-2021-1518 · Linux +5 · Linux Kernel +5

🗓️ 28 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Linux kernel before v5.14-rc1 allows remote information disclosure via out of bounds read in stream control protocol handling.

Reporter	Title	Published	Views	Family All 26357
BDU FSTEC	The vulnerability in the implementation of the video_usercopy function (drivers/media/v4l2-core/v4l2-ioctl.c) in the Linux operating system kernel allows a malicious actor to trigger a service failure.	13 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netfilter subsystem in the Linux operating system, which allows a hacker to cause a service failure	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rtr_recvmsg function in the Linux operating system allows a hacker to obtain confidential information.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the BPF subsystem of the `map_create` or `check_btf_info` function of the Linux kernel allows a malicious actor to cause an unexpected termination of the application.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `tipc_nl_retrieve_key` function in the Linux operating system allows a hacker to cause a service failure.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the kernel/bpf/verifier.c component of the Linux operating system allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges	9 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.	23 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the joydevhandle_JSIOCSBTNMAP() function in the Red Hat Enterprise Linux operating system, which allows a hacker to cause a service failure or increase their privileges.	25 Jun 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.13.3 - 9.8

CVSS 29

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.93838

SSVC