PT-2022-3466 · Linux +5 · Linux Kernel +5

🗓️ 30 May 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Linux kernel use-after-free in bad flp intr enables local code execution or denial of service; no fix.

Reporter	Title	Published	Views	Family All 22077
BDU FSTEC	The vulnerability of Intel’s MMIO input/output system, which allows a hacker to disclose protected information	19 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the route4_change function (net/sched/cls_route.c) in the Linux operating system allows a attacker to execute arbitrary code or cause the application to crash.	22 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the btrfs_queue_work function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.	22 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_dirty_ring_push function (virt/kvm/dirty_ring.c) in the KVM virtualization subsystem of the Linux operating system allows a hacker to trigger a service failure.	22 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the /net/nfc/netlink.c component of the Linux operating system allows a hacker to cause a service failure.	22 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the /net/nfc/core.c component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	22 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netback driver for Linux operating systems allows a hacker to trigger a service failure.	30 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to cause a service failure, an application to terminate abnormally, or execute arbitrary code.	30 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the X.25 protocol implementation in the Linux operating system allows a hacker to trigger an emergency shutdown of the system.	31 Aug 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfcmrvl_nci_unregister_dev() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Aug 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636

14 Aug 2023 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC