PT-2022-2565 · Linux +9 · Linux Kernel +9

🗓️ 12 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 19 Views

Linux kernel before 5.17.2 mishandles seccomp in PTRACE SEIZE, risking privilege escalation.

Reporter	Title	Published	Views	Family All 24096
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, which allows a hacker to increase their privileges	19 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the ICMPv6 network protocol in Linux operating systems allows a hacker to induce a service failure.	19 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drivers/hid/hid-elo.c component in the Linux operating system allows a hacker to cause a service failure.	19 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `block_invalidatepage()` function in Linux operating system kernels allows a hacker to trigger a service failure.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Direct Memory Access (DMA) subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vgem_gem_dumb_create function in Linux kernel allows a hacker to execute arbitrary code.	22 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the TIPC network protocol in the Linux operating system allows a hacker to cause a service failure or increase their privileges.	25 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ems_usb_start_xmit function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the function of drivers/bluetooth/virtio_bt.c in the Linux kernel allows a hacker to cause a service failure.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `mcba_usb_start_xmit` function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	27 Apr 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_4034_pwnkit_lpe_pkexec.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/berdav/CVE-2021-4034
github	www.github.com/arthepsy/CVE-2021-4034
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.94921

SSVC