PT-2021-7359 · Linux +5 · Linux Kernel +5

🗓️ 23 Aug 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 26 Views

NULL pointer dereference in btrfs rm device enables local crash or kernel information leak; requires capability administrator.

Reporter	Title	Published	Views	Family All 22540
BDU FSTEC	The vulnerability of the ems_usb_start_xmit function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the function of drivers/bluetooth/virtio_bt.c in the Linux kernel allows a hacker to cause a service failure.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `mcba_usb_start_xmit` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kernel of the FireDTV driver in the Linux operating system allows a hacker to trigger an emergency shutdown of the system and compromise the confidentiality and integrity of the protected information.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the copy_page_to_iter() function in the Linux operating system allows a hacker to disclose sensitive information or cause service failures.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the driver for Xilinx USB devices (drivers/usb/gadget/udc/udc-xilinx.c) in Linux operating systems allows a hacker to execute arbitrary code.	28 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the pfkey_register function in the Linux operating system’s kernel allows a perpetrator to gain unauthorized access to protected information or cause service failures.	6 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the io_rw_init_file function in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.	6 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drivers in drivers/net/hamradio within the Linux operating system allows a hacker to cause a service failure.	13 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fs/io_uring.c file in the io_uring subsystem of the Linux operating system allows a attacker to cause a service failure or gain increased privileges.	13 May 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/torvalds/linux/commit/e4571b8c5e9ffa1e85c0c671995bd4dcc5c75091
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

09 Nov 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.1 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC