PT-2022-2275 · Linux +5 · Linux Kernel +5

🗓️ 24 Jan 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Memory leak in Linux kernel hid elo driver during hid parse errors; could cause denial of service.

Reporter	Title	Published	Views	Family All 21153
BDU FSTEC	The vulnerability of the queue insertion function sch_sfb in Linux operating system kernels allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver/char/pcmcia/scr24x_cs.c component of Linux kernel allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver drivers/usb/mon/mon_bin.c of Linux operating systems allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the link counting function in the BSS mode of the Linux operating system’s kernel allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the UDF file system functionality in Linux operating systems allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the pipe_resize_ring function in Linux operating systems allows a hacker to execute arbitrary code.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the bpf_tail_call() function in the BPF subsystem of Linux’s operating systems allows a hacker to gain unauthorized access to data.	22 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC