PT-2021-7254 · Linux +5 · Linux Kernel +5

🗓️ 17 Nov 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Use-after-free in Linux kernel Near Field Communication Controller Interface enables local users to cause data races during removal and escalate privileges.

Reporter	Title	Published	Views	Family All 20769
BDU FSTEC	The vulnerability of the free_charger_irq() function in the drivers/power/supply/wm8350_power.c file of the Linux kernel allows a hacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ef100_update_stats function in the drivers/net/hyperv.netvsc_drv.c file of the Linux kernel allows a hacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `kfd_parse_subtype_iolink` function in the `drivers/gpu/drm/amd/amdkfd/kfd_crat.c` file of the Linux operating system’s kernel allows a hacker to trigger a service failure or increase their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ef100_update_stats` function in the `drivers/net/ethernet/sfc/ef100_nic.c` file of the Linux kernel allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the amvdec_set_canvases() function in the Linux kernel’s drivers/staging/media/meson/vdec/vdec_helpers.c file allows a hacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the lkdtm_ARRAY_BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel allows a attacker to cause a system failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the uapi_finalize() function in the drivers/infiniband/core/uverbs_uapi.c file of the Linux kernel allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the imx_register_uart_clocks() function in the drivers/clk/imx/clk.c file of the Linux kernel allows a hacker to cause system failures or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the malidp_crtc_reset() function in the Linux kernel’s drivers/gpu/drm/arm/malidp_crtc.c file allows a hacker to trigger a service failure or increase their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.	22 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17 - 9.8

CVSS 29

CVSS 37.4 - 8.8

CVSS 48.6

EPSS0.67994

SSVC