PT-2021-5663 · Linux +3 · Linux Kernel +3

🗓️ 14 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Linux kernel memory leak in rds conn create() may cause denial of service; upgrade to 5.15.11 or later.

Reporter	Title	Published	Views	Family All 22385
BDU FSTEC	The vulnerability of the drivers in drivers/net/hamradio within the Linux operating system allows a hacker to cause a service failure.	13 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fs/io_uring.c file in the io_uring subsystem of the Linux operating system allows a attacker to cause a service failure or gain increased privileges.	13 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the randomized generation of port numbers for outgoing TCP connections on Linux kernel ports allows a hacker to predict the port number of an outgoing TCP connection.	13 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rtrs_clt_dev_release function (drivers/infiniband/ulp/rtrs/rtrs-clt.c) in the Linux kernel allows a hacker to trigger a service failure.	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `map_get_next_key` function in the Linux operating system, which allows a hacker to cause a service failure	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the system call PTRACE_SEIZE in the secure computing mode of the Linux operating system’s kernel’s seccomp mechanism allows a attacker to increase their privileges.	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the get_user_pages_fast() function implementation in the KVM virtualization subsystem of Linux operating systems allows a attacker to cause a service failure or gain increased privileges.	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the u32_change() function in the link counter component of the Linux kernel’s net/sched module allows a attacker to elevate their privileges to root level.	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the ICMP protocol in Linux kernel allows a attacker to access confidential information.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the prealloc_elems_and_frealist function (kernel/bpf/stackmap.c) in the Linux operating system’s kernel, which allows an attacker to access confidential information or cause a service failure	26 May 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC