PT-2021-6126 · Gcc +6 · Gcc +6

🗓️ 19 May 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 34 Views

Buffer overflow in Linux kernel up to 5.16.10 enables remote code execution; upgrade beyond 5.16.10.

Reporter	Title	Published	Views	Family All 20932
BDU FSTEC	The vulnerability of the uapi_finalize() function in the drivers/infiniband/core/uverbs_uapi.c file of the Linux kernel allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the imx_register_uart_clocks() function in the drivers/clk/imx/clk.c file of the Linux kernel allows a hacker to cause system failures or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the malidp_crtc_reset() function in the Linux kernel’s drivers/gpu/drm/arm/malidp_crtc.c file allows a hacker to trigger a service failure or increase their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mtk_vcodec_fw_vpu_init() function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c file allows a attacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NFS file system driver in Linux operating systems allows a hacker to trigger a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the intr_callback() function (drivers/net/usb/r8152.c) in Linux operating system kernels, allowing a hacker to cause a service failure	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the queue insertion function sch_sfb in Linux operating system kernels allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver/char/pcmcia/scr24x_cs.c component of Linux kernel allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code	22 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

09 Nov 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 29

CVSS 3.19.1 - 9.8

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC