PT-2022-2824 · Linux +2 · Linux Kernel +2

🗓️ 27 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Integer overflow in Linux kernel virtio vhost vdpa config validate may crash or enable local privilege escalation; no fix.

Reporter	Title	Published	Views	Family All 21916
BDU FSTEC	The vulnerability of the `rpmsg_virtio_add_ctrl_dev` function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to trigger a service failure.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver/block/floppy.c component of Linux operating systems allows a hacker to cause a service failure.	4 Jul 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the nft_set_desc_concat_parse() function in Linux operating systems, allowing a hacker to cause a service failure or execute arbitrary code	4 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the bad_flp_intr function in the Linux operating system’s kernel, allowing a hacker to execute arbitrary code	8 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nci_request function in the NFC controller interface (net/nfc/nci/core.c) of the Linux operating system allows a hacker to increase their privileges.	11 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cross-platform hypervisor Xen in the Linux operating system allows a hacker to execute arbitrary code.	11 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the smtcfb_read() function in the Linux operating system allows a hacker to disclose sensitive information and cause service interruptions.	15 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netback driver for Linux operating systems allows a hacker to trigger a service failure.	18 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfnetlink_queue module in Linux operating systems, related to incorrect handling of verdicts with a single-byte attribute nfta_payload, allows a perpetrator to trigger a service failure.	29 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `clear_bss` function in Linux operating system kernels, related to errors during the clearing of the initial symbol of a block (.bss), allows an attacker to execute arbitrary code.	1 Aug 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995

14 Aug 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.89721

SSVC