PT-2022-4510 · Linux +5 · Linux Kernel +5

🗓️ 21 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Linux kernel netback driver vulnerability may cause denial of service due to resource release errors.

Reporter	Title	Published	Views	Family All 23343
bdu_fstec	Vulnerability of the gadget_dev_desc_UDC_show function in the Android operating system’s kernel, allowing a hacker to gain unauthorized access to protected information	17 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ip6_xmit function in the (6_output.c) kernel of the Android operating system allows a hacker to increase their privileges.	17 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ufshcd_eh_device_reset_handler function (ufshcd.c) in the Android operating system allows a hacker to execute arbitrary commands and gain access to information.	17 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the `drivers/usb/gadget/legacy/inode.c` component of Linux kernel allows a hacker to cause a service failure.	17 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the unix_scm_to_skb function (af_unix.c) in the Android operating system’s kernel allows a hacker to increase their privileges.	17 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the kvm_s390_guest_sida_op() function in the KVM virtualization subsystem of Linux operating systems allows a hacker to gain unauthorized access to protected information.	22 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the driver/drivers/usb/gadget/composite.c file of the Linux operating system allows a hacker to execute arbitrary code.	25 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the UDF subsystem in Linux operating systems allows a hacker to trigger a service failure.	25 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the driver/drivers/usb/gadget/function/rndis.c file of the Linux operating system allows a hacker to gain unauthorized access to protected information.	25 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, allowing a hacker to execute arbitrary code	25 Feb 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.16.5 - 9.8

CVSS 29

CVSS 37.4 - 8.8

CVSS 48.6

EPSS0.89063

SSVC