PT-2022-1369 · Linux +2 · Linux Kernel +2

🗓️ 19 May 2021 00:00:00Reported by Positive TechnologiesType

A use-after-free in the Linux kernel io uring subsystem allows local privilege escalation or crash when a ring has multiple completing tasks.

Reporter	Title	Published	Views	Family All 12003
altlinux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.118-alt1	30 May 202200:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package kernel-image-std-def version 2:5.10.121-alt1	15 Jun 202200:00	–	altlinux
attackerkb	CVE-2020-27170	20 Mar 202122:15	–	attackerkb
attackerkb	CVE-2021-3506	19 Apr 202122:15	–	attackerkb
attackerkb	CVE-2021-3772	2 Mar 202223:15	–	attackerkb
attackerkb	CVE-2021-3679	5 Aug 202120:15	–	attackerkb
attackerkb	CVE-2022-36280	6 Sep 202207:00	–	attackerkb
attackerkb	CVE-2021-3659	22 Aug 202215:15	–	attackerkb
attackerkb	CVE-2022-1508	31 Aug 202216:15	–	attackerkb
attackerkb	CVE-2021-38203	8 Aug 202120:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185
github	www.github.com/imfiver/CVE-2022-0847
github	www.github.com/r1is/CVE-2022-0847
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490

13 Feb 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8 - 9.8

CVSS 29

EPSS0.89063

SSVC