PT-2021-1524 · Linux +8 · Linux Kernel +8

🗓️ 14 Jul 2021 00:00:00Reported by Positive TechnologiesType

Local attacker can exploit a use-after-free in cgroup v1 parser to escalate privileges and container breakout.

Reporter	Title	Published	Views	Family All 8125
Ubuntu	LSN-0078-1: Kernel Live Patch Security Notice	19 Jul 202107:41	–	ubuntu
Ubuntu	LSN-0079-1: Kernel Live Patch Security Notice	26 Jul 202108:29	–	ubuntu
Ubuntu	LSN-0081-1: Kernel Live Patch Security Notice	13 Sep 202109:12	–	ubuntu
Ubuntu	LSN-0083-1: Kernel Live Patch Security Notice	6 Jan 202209:48	–	ubuntu
Ubuntu	LSN-0084-1: Kernel Live Patch Security Notice	20 Jan 202208:11	–	ubuntu
Ubuntu	LSN-0085-1: Kernel Live Patch Security Notice	23 Mar 202208:58	–	ubuntu
Ubuntu	LSN-0086-1: Kernel Live Patch Security Notice	2 Jun 202209:44	–	ubuntu
Ubuntu	LSN-0091-1: Kernel Live Patch Security Notice	14 Feb 202309:21	–	ubuntu
Ubuntu	USN-4751-1: Linux kernel vulnerabilities	25 Feb 202106:43	–	ubuntu
Ubuntu	USN-4946-1: Linux kernel vulnerabilities	11 May 202121:53	–	ubuntu

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/Liang2580/CVE-2021-33909
github	www.github.com/chompie1337/Linux_LPE_io_uring_CVE-2021-41073

23 Mar 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.4 - 9.8

CVSS 29

CVSS 38.8

EPSS0.88606

SSVC