PT-2022-2045 · Linux +10 · Linux Kernel +10

🗓️ 31 Jan 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Linux kernel use-after-free in tc new tfilter enables local privilege escalation with unprivileged namespaces; upgrade beyond commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5.

Reporter	Title	Published	Views	Family All 21562
BDU FSTEC	The vulnerability of the em28xx_usb_probe function in the video4linux driver of Linux operating systems allows attackers to gain increased privileges.	21 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the USB device subsystem in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the kernel/sched/wait.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the verifier functions ebpf in the bpf_map_update_elem and bpf_map_freeze components of the Linux operating system’s kernel/bpf/syscall.c module allows a attacker to compromise data integrity.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the bpf_jit_insn component (arch/s390/net/bpf_jit_comp.c) in the Linux operating system allows a hacker to gain access to confidential data.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s GPU i915 kernel driver allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	23 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the fs/io_uring.c component in Linux operating systems allows a hacker to cause a service failure.	30 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ismt_access() function in the i2c-ismt driver of Linux operating systems allows a hacker to cause a service failure.	30 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions dvb_demux_open() and dvb_dmxdev_release() in the dvb-core driver of Linux operating systems allow a hacker to cause a service failure.	30 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the stex_queuecommand_lck() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.	3 Oct 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

21 May 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 48.6

CVSS 3.19.1 - 9.8

CVSS 29

CVSS 38.8

EPSS0.67994

SSVC