PT-2022-3608 · Linux +4 · Linux Kernel +4

🗓️ 30 Jun 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Out of bounds memory access in the framebuffer read function may disclose data and crash the kernel.

Reporter	Title	Published	Views	Family All 19474
BDU FSTEC	The vulnerability of the wireless communication subsystem in the Linux kernel’s net/mac802154/llsec.c module, which allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the memory manager in the ipc/util.c module of the Linux operating system allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the io_uring subsystem in the fs/io_uring.c module of the Linux operating system allows a hacker to disclose protected information or cause service failures.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in AMD Secure Encrypted Virtualization (SEV) in the virt/kvm/kvm_main.c kernel of the Linux operating system allows a hacker to trigger a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the USB module subsystem of the Linux kernel’s drivers/usb/core/hub.c file allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Upper Level Protocol (ULP) in the Linux operating system allows a hacker to enhance their privileges, execute arbitrary code, or cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the SCTP (Stream Control Transmission Protocol) kernel of the Linux operating system allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rds_rm_zerocopy_callback() function in the net/rds/message.c module of the Linux operating system allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nf_tables_updtable function (nf_tables_api.c) in the Linux kernel network interface layer allows a attacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the qmp_get() function (driver/soc/qcom/qcom_aoss.c) in the Qualcomm AOSS driver for Linux operating systems allows a hacker to induce a service failure.	15 Mar 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC