PT-2021-4222 · Linux +5 · Linux Kernel +5

🗓️ 13 Jun 2021 00:00:00Reported by Positive TechnologiesType

Local users can read kernel stack memory due to uninitialized data in net/can/bcm.c, affected through 5.12.10.

Reporter	Title	Published	Views	Family All 11886
OSV	CLSA-2024-1726651745 kernel: Fix of 4 CVEs	18 Sep 202409:29	–	osv
OSV	CLSA-2024-1731430561 kernel: Fix of 31 CVEs	12 Nov 202416:56	–	osv
OSV	CLSA-2024-1731431059 kernel: Fix of 31 CVEs	12 Nov 202417:04	–	osv
OSV	CLSA-2025-1742469561 kernel: Fix of 19 CVEs	20 Mar 202511:19	–	osv
OSV	CLSA-2025-1742471200 kernel: Fix of 19 CVEs	20 Mar 202511:46	–	osv
OSV	CLSA-2026-1768774361 kernel: Fix of 31 CVEs	18 Jan 202622:12	–	osv
OSV	CLSA-2026-1768775579 kernel: Fix of 49 CVEs	19 Jan 202615:09	–	osv
OSV	CVE-2021-29648	30 Mar 202121:15	–	osv
OSV	CVE-2021-30178	7 Apr 202100:15	–	osv
OSV	CVE-2021-32606	11 May 202123:15	–	osv

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

25 Mar 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 34 - 5.5

CVSS 48.7

EPSS0.89721

SSVC