PT-2021-6091 · Linux +10 · Linux Kernel +10

🗓️ 22 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 20 Views

XFS IOCTL data leak allows local access to unused block data; update kernels to fixed versions.

Reporter	Title	Published	Views	Family All 21280
BDU FSTEC	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions unix_sock_destructor() and unix_release_sock() in the BPF subsystem of Linux kernel allow a attacker to cause a service failure.	26 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the intel_gvt_dma_map_guest_page() function in Linux kernel allows a hacker to trigger a service failure.	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_reassemble_sdu() function (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the devlink_param_set/devlink_param_get function (net/core/devlink.c) in the Linux operating system’s IPsec kernel component, which allows a attacker to execute arbitrary code	3 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the del_timer function in the drivers/isdn/mISDN/l1oip_core.c file of the Linux kernel allows a hacker to execute arbitrary code.	3 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the net/rose/rose_timer.c component in the Linux operating system allows a hacker to cause a service failure.	22 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.	22 Nov 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_connect and l2cap_le_connect_req functions (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a hacker to execute arbitrary code	2 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 37.4 - 8.8

CVSS 48.6

EPSS0.88606

SSVC