Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PT-2021-1528 · Linux +2 · Linux Kernel +2

🗓️ 21 Feb 2021 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Linux kernel use-after-free via io_uring splice when the IO_WQ_WORK_FILES flag is missing, affecting nsproxy.

Related
Refs
ReporterTitlePublishedViews
Family
osv
OSV		LSN-0086-1 Kernel Live Patch Security Notice
2 Jun 202207:44
–osv
osv
OSV		LSN-0091-1 Kernel Live Patch Security Notice
14 Feb 202308:21
–osv
osv
OSV		LSN-0092-1 Kernel Live Patch Security Notice
7 Mar 202311:04
–osv
osv
OSV		LSN-0093-1 Kernel Live Patch Security Notice
27 Mar 202307:25
–osv
osv
OSV		MGASA-2021-0117 Updated kernel packages fix security issues and possible filesystem corruption
7 Mar 202121:35
–osv
osv
OSV		MGASA-2021-0151 Updated kernel packages fix security issues
22 Mar 202117:17
–osv
osv
OSV		MGASA-2021-0152 Updated kernel-linus packages fix security issues
22 Mar 202117:17
–osv
osv
OSV		MGASA-2021-0174 Updated kernel packages fix security vulnerabilities
3 Apr 202113:16
–osv
osv
OSV		MGASA-2021-0175 Updated kernel-linus packages fix security vulnerabilities
3 Apr 202113:16
–osv
osv
OSV		MGASA-2021-0191 Updated kernel-linus packages fix security vulnerabilities
18 Apr 202114:50
–osv
Rows per page
SourceLink
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
githubwww.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
githubwww.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
githubwww.github.com/Crusaders-of-Rust/CVE-2022-0185
githubwww.github.com/imfiver/CVE-2022-0847
githubwww.github.com/r1is/CVE-2022-0847
githubwww.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 May 2023 00:00Current
7.4High risk
Vulners AI Score7.4
CVSS 3.17.8 - 9.8
CVSS 29
EPSS0.89721
SSVC
linux kernelio uringsplice operationuse after freensproxy usageversion 5.10.160
15