PT-2021-7264 · Linux +8 · Linux Kernel +8

🗓️ 14 Apr 2021 00:00:00Reported by Positive TechnologiesType

Linux kernel NFS flaw allows out-of-bounds write via mirroring, risking crash or privilege escalation.

Reporter	Title	Published	Views	Family All 14260
ALT Linux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.118-alt1	30 May 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.121-alt1	15 Jun 202200:00	–	altlinux
attackerkb	CVE-2020-27170	20 Mar 202122:15	–	attackerkb
attackerkb	CVE-2021-3506	19 Apr 202122:15	–	attackerkb
attackerkb	CVE-2021-3772	2 Mar 202223:15	–	attackerkb
attackerkb	CVE-2021-3659	22 Aug 202215:15	–	attackerkb
attackerkb	CVE-2021-0941	25 Oct 202114:15	–	attackerkb
attackerkb	CVE-2022-0286	31 Jan 202216:15	–	attackerkb
attackerkb	CVE-2021-29154	8 Apr 202121:15	–	attackerkb
attackerkb	CVE-2021-3764	23 Aug 202216:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490
github	www.github.com/randorisec/CVE-2022-34918-LPE-PoC

17 Jan 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18 - 9.8

CVSS 27.9

CVSS 35.1

EPSS0.92795

SSVC