PT-2021-6851 · Linux +6 · Linux Kernel +6

🗓️ 10 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Linux kernel before 5.16.3 has a null pointer dereference in fs/f2fs/gc.c that could cause denial of service.

Reporter	Title	Published	Views	Family All 24600
BDU FSTEC	The vulnerability of the sco_sock_sendmsg() function in the HCI subsystem of the Linux operating system allows a hacker to trigger an emergency shutdown of the system or increase their privileges.	4 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Linux operating system kernels, related to deficiencies in input data validation, allows attackers to gain unauthorized access to protected information.	6 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hso_free_net_device function in the Linux kernel’s /net/usb/hso.c driver allows a attacker to compromise privacy, integrity, and accessibility.	12 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rtas_args.nargs function in the arch/powerpc/kvm/book3s_rtas.c driver of the Linux operating system allows a attacker to trigger memory corruption on the host operating system.	12 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ccp-ops crypto driver in the Linux operating system allows a hacker to cause a service failure.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Bluetooth subsystem, which allows a hacker to trigger an emergency shutdown of the system	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the vt_k_ioctl function in the Linux operating system’s kernel, which allows a hacker to disclose protected information	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ccp_run_aes_gcm_cmd() function in the Linux operating system allows a hacker to trigger a service failure.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to information disclosure through discrepancies, allows attackers to read a portion of the kernel’s memory.	5 Oct 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Notselwyn/CVE-2024-1086
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

25 Mar 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC