PT-2021-7067 · Linux +9 · Linux Kernel +9

🗓️ 30 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Kernel prealloc elements and freelist overflow enables unprivileged eBPF out-of-bounds write; upgrade to 5.14.12.

Reporter	Title	Published	Views	Family All 26179
BDU FSTEC	The vulnerability in the kernel/bpf/verifier.c component of the Linux operating system allows a hacker to gain unauthorized access to protected information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges	9 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.	23 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the joydevhandle_JSIOCSBTNMAP() function in the Red Hat Enterprise Linux operating system, which allows a hacker to cause a service failure or increase their privileges.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xen-netback component in the Linux operating system allows a hacker to increase their privileges or expose sensitive information.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to protected information.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the CAN BCM protocol in Linux kernel allows a hacker to increase their privileges.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `arch/arm/mach-footbridge/personal-pci.c` component of the Linux operating system allows a attacker to disclose sensitive information or cause service failures.	25 Jun 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to gain access to confidential information or cause a service failure.	6 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to information disclosure, allows attackers to gain access to confidential data.	6 Jul 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.88606

SSVC