PT-2021-7296 · Linux +5 · Linux Kernel +5

🗓️ 15 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

A memory leak in the Linux kernel's eBPF with the simulated networking device driver lets a local user access data via nsim map alloc elem.

Reporter	Title	Published	Views	Family All 20076
BDU FSTEC	The vulnerability of the Linux operating system’s Network File System kernel allows a hacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions gru_set_context_option(), gru_fault(), and gru_handle_user_call_os() in the SGI GRU kernel of the Linux operating system allow attackers to cause service failures or gain increased privileges.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the filelock_init function in the locking mechanism (fs/locks.c) of the Linux operating system allows a hacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the atm_tc_enqueue() function in the network packet scheduling subsystem (net/sched/sch_atm.c) of the Linux kernel allows a attacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cbq_classify() function in the network packet scheduling subsystem (net/sched/sch_cbq.c) in the Linux kernel allows a attacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver drivers/net/wireless/rndis_wlan.c of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netfilter component in the Linux operating system allows a hacker to gain unauthorized access to protected information and increase their privileges.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the read_bbreg_hdl() function in the drivers/staging/rtl8712/rtl8712_cmd.c file of the Wi-Fi driver rtl8712 for the Linux kernel allows a hacker to cause a service failure.	30 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the fs/io_uring.c file of the io_uring subsystem in the Linux operating system allows a hacker to cause a service failure.	30 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qdisc_graft function (net/sched/sch_api.c) in the Linux kernel’s traffic management subsystem allows a attacker to cause a service failure.	8 Feb 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC