PT-2021-7315 · Linux +5 · Linux Kernel +5

🗓️ 08 Oct 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Use-after-free in the Linux kernel Near Field Communication interface enables privilege escalation.

Reporter	Title	Published	Views	Family All 24675
BDU FSTEC	The vulnerability of the randomized generation of port numbers for outgoing TCP connections on Linux kernel ports allows a hacker to predict the port number of an outgoing TCP connection.	13 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rtrs_clt_dev_release function (drivers/infiniband/ulp/rtrs/rtrs-clt.c) in the Linux kernel allows a hacker to trigger a service failure.	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `map_get_next_key` function in the Linux operating system, which allows a hacker to cause a service failure	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the system call PTRACE_SEIZE in the secure computing mode of the Linux operating system’s kernel’s seccomp mechanism allows a attacker to increase their privileges.	17 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the get_user_pages_fast() function implementation in the KVM virtualization subsystem of Linux operating systems allows a attacker to cause a service failure or gain increased privileges.	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the u32_change() function in the link counter component of the Linux kernel’s net/sched module allows a attacker to elevate their privileges to root level.	20 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the ICMP protocol in Linux kernel allows a attacker to access confidential information.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the prealloc_elems_and_frealist function (kernel/bpf/stackmap.c) in the Linux operating system’s kernel, which allows an attacker to access confidential information or cause a service failure	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the route4_change() function (net/sched/cls_route.c) in the Linux operating system allows a attacker to access confidential information or cause service failures.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ath9k_htc_wait_for_target function in the wireless adapter driver for Atheros in the Linux operating system allows a hacker to gain access to the kernel’s memory. This can lead to system failures or the leakage of internal kernel information.	26 May 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

09 Nov 2023 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 36.7 - 8.8

CVSS 48.7

EPSS0.92621

SSVC