PT-2021-3701 · Linux +2 · Linux Kernel +2

🗓️ 22 Jun 2021 00:00:00Reported by Positive TechnologiesType

Linux kernel module signature check fails when module.sig enforce=1 is used without CONFIG MODULE SIG.

Reporter	Title	Published	Views	Family All 6054
zdt	Linux Kernel 2.6.19 < 5.9 - (Netfilter) Local Privilege Escalation Exploit	16 Jul 202100:00	–	zdt
zdt	Linux eBPF ALU32 32-bit Invalid Bounds Tracking Local Privilege Escalation Exploit	1 Sep 202100:00	–	zdt
zdt	Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation Exploit	7 Oct 202100:00	–	zdt
zdt	Docker cgroups Container Escape Exploit	7 Dec 202300:00	–	zdt
Veracode	Information Disclosure	18 Aug 202117:54	–	veracode
Veracode	Remote Code Execution (RCE)	2 Sep 202100:39	–	veracode
Veracode	Denial Of Service (DoS)	9 Sep 202116:22	–	veracode
Veracode	Denial Of Service (DoS)	11 Sep 202117:29	–	veracode
Veracode	Privilege Escalation	11 Sep 202117:29	–	veracode
Veracode	Denial Of Service (DoS)	11 Sep 202117:29	–	veracode

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490
github	www.github.com/Liang2580/CVE-2021-33909
github	www.github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md
github	www.github.com/PaloAltoNetworks/can-ctr-escape-cve-2022-0492
github	www.github.com/ChrisTheCoolHut/CVE-2021-33909
github	www.github.com/veritas501/CVE-2021-22555-PipeVersion
github	www.github.com/0xdevil/CVE-2021-42008

16 May 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.8 - 8.8

CVSS 29

CVSS 34

CVSS 48.7

EPSS0.78684

SSVC