PT-2021-6085 · Linux +9 · Linux Kernel +9

🗓️ 04 Oct 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Local attacker exploit Linux kernel RDMA listener use-after-free to crash or gain privileges.

Reporter	Title	Published	Views	Family All 19729
bdu_fstec	The vulnerability of the qmp_get() function (driver/soc/qcom/qcom_aoss.c) in the Qualcomm AOSS driver for Linux operating systems allows a hacker to induce a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerabilities of the functions module_gzip_decompress() and module_xz_decompress() in the kernel/module/decompress.c module of the Linux operating system’s kernel module loading subsystem allow a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the dwc3_qcom_probe() function (drivers/usb/dwc3/dwc3-qcom.c) in the Qualcomm USB 3.0 driver for the Linux operating system allows a hacker to induce a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `tegra_xusb_find_port_node()` function (drivers/phy/tegra/xusb.c) in the NVIDIA Tegra XUSB driver for Linux operating systems allows a hacker to induce a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ufs_mtk_init_va09_pwr_ctrl() function (drivers/scsi/ufs/ufs-mediatek.c) in the Linux operating system’s UFS driver allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the malidp_check_pages_threshold() function (drivers/gpu/drm/arm/malidp_planes.c) in the Linux operating system’s Mali-DP kernel driver allows a hacker to trigger a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the dr_domain_init_resources() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c file of the Linux kernel allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability in the driver/bluetooth/hci_qca.c file of the Linux operating system allows a hacker to trigger a service failure.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ene_remove() function (drivers/media/rc/ene_ir.c) in the Linux kernel’s infrared receiver/sender driver allows a attacker to cause a service failure or gain elevated privileges.	15 Mar 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ovl_write_iter() function in the file system implementation of overlayfs in Linux kernels allows a attacker to cause a service failure or gain increased privileges.	17 Mar 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC