PT-2022-3254 · Linux +4 · Linux Kernel +4

🗓️ 26 Jun 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Double free in rpmsg probe may cause denial of service in Linux kernel; upgrade to 5.18.4 or later.

Reporter	Title	Published	Views	Family All 19334
BDU FSTEC	The vulnerability of the OverlayFS subsystem in Linux kernel allows a hacker to increase their privileges.	20 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AMD KVM subsystem for supporting embedded virtualization in Linux kernel allows a hacker to induce a service failure.	20 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel memory management subsystem allows a hacker to cause a service failure or potentially execute arbitrary code.	20 Mar 202300:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the expr__ctx_new() function (tools/perf/util/expr.c): This function is part of the Linux operating system’s kernel utilities, which allows a hacker to cause a service failure or potentially have other adverse effects.	23 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tcf_exts_exec() function in the tcindex indexing filter of the tcindex traffic control system in Linux kernels allows a hacker to increase their privileges.	27 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the stat() function in the OverlayFS subsystem of Linux kernels allows attackers to increase their privileges.	27 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the miEnumattr() function in the fs/ntfs3/record.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	30 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ib_copy_ah_attr_to_user()` function in Linux operating system-based connection managers allows a hacker to gain unauthorized access to protected information.	2 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tun_free_netdev() function in Linux kernel-based TUN/TAP virtual network drivers allows a attacker to cause service failure or gain increased privileges.	3 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vhost_net_set_backend function (drivers/vhost/net.c) in the Linux kernel’s virtio subcomponent allows a attacker to cause a service failure and expose sensitive information.	11 Apr 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC