PT-2022-4331 · Linux +4 · Linux Kernel +4

🗓️ 01 May 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 26 Views

Use-after-free in Linux NFC core from race in kobject creation and deletion; net admin privilege can leak kernel info.

Reporter	Title	Published	Views	Family All 12078
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, MongoDB, Python, Samba, OpenSSL and cURL libcurl affect IBM Spectrum Protect Plus	10 Apr 202507:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities	7 Jun 202415:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	13 May 202511:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	29 Aug 202211:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	11 Dec 202016:00	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/randorisec/CVE-2022-34918-LPE-PoC
github	www.github.com/veritas501/CVE-2022-34918
github	www.github.com/plummm/CVE-2022-27666
github	www.github.com/theori-io/CVE-2022-32250-exploit
github	www.github.com/Ruia-ruia/CVE-2022-29582-Exploit
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19377

27 Jun 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5 - 7.7

CVSS 35.5 - 5.9

CVSS 3.17.8 - 9.8

EPSS0.10458

SSVC