PT-2022-3221 · Linux +5 · Linux Kernel +5

🗓️ 18 May 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Linux kernel before 5.17.9 has insufficient entropy enabling attackers to identify TCP clients.

Reporter	Title	Published	Views	Family All 20907
BDU FSTEC	The vulnerability of the link counting function in the BSS mode of the Linux operating system’s kernel allows a hacker to execute arbitrary code.	18 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, allowing a hacker to execute arbitrary code	18 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver drivers/net/hamradio/6pack.c of the Linux operating system allows a hacker to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ax25_release() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the asynchronous input/output interface io_uring in Linux kernel allows a hacker to escalate their privileges.	21 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions unix_sock_destructor() and unix_release_sock() in the BPF subsystem of Linux kernel allow a attacker to cause a service failure.	26 Oct 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_recv_acldata() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a hacker to trigger a service failure	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_conn_del() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 3.19.1 - 9.8

CVSS 48.6

EPSS0.67994

SSVC