PT-2022-1733 · Linux +10 · Linux Kernel +10

🗓️ 06 May 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 29 Views

Linux kernel 5.4–5.6.10 has a heap out-of-bounds write in netfilter offload enabling escalation.

Reporter	Title	Published	Views	Family All 26735
BDU FSTEC	The vulnerability of the exec_id function in the Linux operating system’s kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the VFIO PCI kernel driver for Linux operating systems, related to insufficient handling of exceptional conditions, allows a hacker to trigger a service failure.	2 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the slc_bump function in the Linux operating system’s drivers/net/can/slcan.c file, which allows a hacker to gain unauthorized access to protected information.	11 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the can_optimize function in the Linux operating system’s kernel code (arch/x86/kernel/kprobes/opt.c) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the rtw_wx_set_scan() function (drivers/staging/rtl8188eu/os_dep/ioctl_linux.c) in Linux kernel, allowing a hacker to trigger a service failure	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BPF mechanism implemented in Linux kernel allows attackers to gain unauthorized access to protected information or execute arbitrary code.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the MIDI protocol in Linux kernel allows attackers to increase their privileges.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_io_bus_unregister_dev function (virt/kvm/kvm_main.c) in Linux operating system kernels allows a hacker to cause a service failure.	8 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the set_memory_region_test function (arch/x86/kvm/svm/svm.c) in Linux operating system kernels allows a malicious actor to cause a service failure.	8 Apr 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits

15 Feb 2025 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.89721

SSVC