PT-2021-5592 · Linux +10 · Linux Kernel +10

🗓️ 14 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 16 Views

A use after free in the Linux kernel Trusted Execution Environment subsystem allows denial of service or privilege escalation via a race in shared memory handling; upgrade beyond five point fifteen point eleven.

Reporter	Title	Published	Views	Family All 23896
BDU FSTEC	The vulnerability in the `drivers/net/ethernet/xilinx/xilinx_emaclite.c` component of the Linux operating system allows a hacker to bypass the ASLR protection mechanism.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_writeinline_data_end function (fs/ext4/inline.c) in the Linux kernel allows a attacker to compromise the integrity, accessibility, and confidentiality of data.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `net/sctp/socket.c` component of the Linux operating system allows a hacker to increase their privileges.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Linux operating system’s socket ports, related to the use of memory after it is freed, allows attackers to increase their privileges.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system’s kernel allows a perpetrator to trigger a service failure due to pointer arithmetic errors.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hci_dev_do_open() function in the Linux kernel’s device initialization subsystem, related to the repeated memory release, allows a attacker to trigger a service failure.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Btrfs implementation in the Linux operating system is related to the allocation of unlimited memory, which allows a hacker to cause a service failure.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM API of the Linux operating system, which allows a hacker to trigger a stack overflow.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Bluetooth Core Specification kernel, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data and compromise its integrity.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mbochs_ioctl function in the samples / vfio-mdev / mbochs.c file of Linux operating system kernels allows a hacker to gain access to protected information.	16 Nov 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

25 Mar 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC