PT-2021-7067 · Linux +9 · Linux Kernel +9

🗓️ 30 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Kernel prealloc elements and freelist overflow enables unprivileged eBPF out-of-bounds write; upgrade to 5.14.12.

Reporter	Title	Published	Views	Family All 26271
bdu_fstec	The vulnerability of the cipso_v4_genopt function (net/ipv4/cipso_ipv4.c) in the Linux operating system allows a hacker to execute arbitrary code.	30 Sep 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, related to writing beyond buffer boundaries in memory, allows a hacker to read part of the kernel’s memory.	30 Sep 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the intel_pmu_drain_pebs_nhm function (arch/x86/events/intel/ds.c) in the Linux operating system’s kernel, which involves uncontrolled resource consumption, allows a hacker to trigger a service failure.	30 Sep 202100:00	–	bdu_fstec
bdu_fstec	The vulnerabilities of the parameters NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS in the Linux kernel’s net/netfilter/nf_conntrack_standalone.c component allow attackers to disclose protected information.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the net/bluetooth/hci_request.c component in the Linux operating system allows a hacker to execute arbitrary code.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the hci_chan structure in the net/bluetooth/hci_event.c component of the Linux operating system allows a attacker to execute arbitrary code.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, related to information disclosure through discrepancies, allows attackers to read a portion of the kernel’s memory.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Nosy driver, a kernel driver for the Linux operating system, allows a hacker to increase their privileges.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the f2fs kernel module in the Linux operating system, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.	5 Oct 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, related to the exposure of information through inconsistencies, allows attackers to obtain confidential information.	5 Oct 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.89063

SSVC