PT-2022-1733 · Linux +10 · Linux Kernel +10

🗓️ 06 May 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 24 Views

Linux kernel 5.4–5.6.10 has a heap out-of-bounds write in netfilter offload enabling escalation.

Reporter	Title	Published	Views	Family All 26436
BDU FSTEC	The vulnerability in the implementation of the MIDI protocol in Linux kernel allows attackers to increase their privileges.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_io_bus_unregister_dev function (virt/kvm/kvm_main.c) in Linux operating system kernels allows a hacker to cause a service failure.	8 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the set_memory_region_test function (arch/x86/kvm/svm/svm.c) in Linux operating system kernels allows a malicious actor to cause a service failure.	8 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the arch/x86/kvm/svm/sev.c component of the Kernel-based Virtual Machine (KVM) virtualization subsystem of Linux operating systems allows a attacker to cause a service failure.	8 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities in the arch/s390/kvm/kvm-s390.c component, include/linux/kvm_host.h, and virt/kvm/kvm_main.c files of the Kernel-Based Virtual Machine (KVM) virtualization subsystem in Linux operating systems allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	8 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ZRAM module in Linux operating systems, Ubuntu, and OpenSUSE Leap allows a hacker to cause a system failure.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of component BPF JIT (arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c) in the Linux operating system allows a hacker to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the function in drivers/char/random.c and kernel/time/timer.c of the Linux operating system allows a hacker to obtain confidential information.	5 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `sndctl elem_add` function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.	19 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the drivers/target/target_core_xcopy.c file of the Linux operating system allows an attacker to gain access to read, modify, add, or delete data.	19 May 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits

15 Feb 2025 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC