PT-2021-7582 · Linux +2 · Linux Kernel +2

🗓️ 03 Mar 2021 00:00:00Reported by Positive TechnologiesType

Kernel crash from use-after-free in io_sqpoll_wait_sq in fs/io_uring.c; finish_wait may be skipped.

Reporter	Title	Published	Views	Family All 11689
ATTACKERKB	CVE-2020-27170	20 Mar 202122:15	–	attackerkb
ATTACKERKB	CVE-2021-20321	18 Feb 202218:15	–	attackerkb
ATTACKERKB	CVE-2021-28660	17 Mar 202115:15	–	attackerkb
ATTACKERKB	CVE-2021-3506	19 Apr 202122:15	–	attackerkb
ATTACKERKB	CVE-2021-3772	2 Mar 202223:15	–	attackerkb
ATTACKERKB	CVE-2021-3679	5 Aug 202120:15	–	attackerkb
ATTACKERKB	CVE-2021-26931	17 Feb 202102:15	–	attackerkb
ATTACKERKB	CVE-2022-36280	6 Sep 202207:00	–	attackerkb
ATTACKERKB	CVE-2021-3659	22 Aug 202215:15	–	attackerkb
ATTACKERKB	CVE-2022-1508	31 Aug 202216:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

04 Jan 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 9.8

CVSS 29

EPSS0.88606

SSVC