PT-2021-7677 · Linux +2 · Linux Kernel +2

🗓️ 03 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Linux kernel io_uring out-of-bounds read via io_read(); local user could disclose memory or cause DoS.

Reporter	Title	Published	Views	Family All 23131
bdu_fstec	The vulnerability of the nf_tables module of the netfilter subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.	31 Mar 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the tc_new_tfilter() function in Linux operating systems allows a hacker to increase their privileges.	31 Mar 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `add_partition` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.	4 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the xs_xprt_free() function in the Sun RPC (Open Network Computing Remote Procedure Call) kernel of Linux operating systems allows a attacker to cause a service failure.	12 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the gc_data_segment function (fs/f2fs/gc.c) in the Linux operating system kernel allows a hacker to trigger a service failure.	15 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the jbd2_journal_wait_updates function in Linux kernel allows a hacker to execute arbitrary code.	15 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the smb2_ioctl_query_info() function in Linux operating systems allows a hacker to cause a service failure.	18 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the BPF_BTF_LOAD() function in the eBPF subsystem of Linux’s operating systems allows a malicious actor to escalate their privileges or cause service interruptions.	18 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges	19 Apr 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the ICMPv6 network protocol in Linux operating systems allows a hacker to induce a service failure.	19 Apr 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.1 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.89063

SSVC