PT-2021-7118 · Linux +2 · Linux Kernel +2

🗓️ 14 Oct 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 30 Views

Io-workqueue data not protected; local user can trigger kernel panic via io-uring ops during space shortage.

Reporter	Title	Published	Views	Family All 22010
BDU FSTEC	The vulnerability of the u32_change() function in the link counter component of the Linux kernel’s net/sched module allows a attacker to elevate their privileges to root level.	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the ICMP protocol in Linux kernel allows a attacker to access confidential information.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the prealloc_elems_and_frealist function (kernel/bpf/stackmap.c) in the Linux operating system’s kernel, which allows an attacker to access confidential information or cause a service failure	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `sys_perf_event_open()` function in the Linux operating system’s perf subsystem allows a local attacker to gain root privileges.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nft_expr_init function in the Linux operating system’s Netfilter packet filtering software allows a hacker to elevate their privileges to the root level.	3 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vhost_vdpa_config_validate() function in Linux kernel allows a attacker to escalate their privileges or cause service failures.	9 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sock_getsockopt() function in the Linux operating system’s kernel allows a hacker to induce a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the io-workqueue in the Linux operating system allows a hacker to cause a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in the Linux operating system allows a hacker to trigger a service failure.	14 Jun 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC