PT-2021-7679 · Linux +3 · Linux Kernel +3

🗓️ 22 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 20 Views

Linux kernel before 5.15.13 misinterprets mlx5 get uars page as NULL, causing denial of service.

Reporter	Title	Published	Views	Family All 24837
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to the lack of protection for service data, allows attackers to disclose protected information.	23 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drivers/scsi/scsi_transport_iscsi.c file in the Linux operating system allows a hacker to connect to the iscsi NETLINK socket and send commands to the kernel.	15 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `show_transport_handle` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	15 Mar 202100:00	–	bdu_fstec
BDU FSTEC	(Vulnerability) The vulnerability of the `show_transport_handle` function in Linux kernel allows a hacker to disclose sensitive information or cause service failures.	15 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GPU Nouveau driver for the Linux operating system, which allows a hacker to trigger a service failure	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the show_transport_handle() function in Linux operating systems allows a malicious actor to gain unauthorized access to protected information.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems allows a hacker to cause a service failure or gain increased privileges.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Freescale Gianfar Ethernet kernel for Linux operating systems allows a hacker to cause a service failure.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.	6 Apr 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

27 Feb 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC