PT-2021-3701 · Linux +2 · Linux Kernel +2

🗓️ 22 Jun 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

Linux kernel module signature check fails when module.sig enforce=1 is used without CONFIG MODULE SIG.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Samba, Sudo, Python, and tcmu-runner affect IBM Spectrum Protect Plus	6 May 202202:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities	7 Jun 202415:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	11 Dec 202016:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management	4 Oct 202106:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM QRadar SIEM (CVE-2021-22543, CVE-2021-3653, CVE-2021-3656, CVE-2021-37576)	28 Apr 202220:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel, Docker, Python, and NGINX affect IBM Spectrum Protect Plus	10 Dec 202118:57	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerability from Kernel affects IBM Netezza Host Management	20 Oct 202211:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490
github	www.github.com/Liang2580/CVE-2021-33909
github	www.github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md
github	www.github.com/PaloAltoNetworks/can-ctr-escape-cve-2022-0492
github	www.github.com/ChrisTheCoolHut/CVE-2021-33909
github	www.github.com/veritas501/CVE-2021-22555-PipeVersion
github	www.github.com/0xdevil/CVE-2021-42008

16 May 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8 - 8.8

CVSS 29

CVSS 34

CVSS 48.7

EPSS0.78684

SSVC