PT-2022-4748 · Linux +7 · Linux Kernel +7

🗓️ 14 Oct 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

A flaw in the Stream Control Transmission Protocol in the Linux kernel can cause a buffer overrun and denial of service.

Reporter	Title	Published	Views	Family All 24138
bdu_fstec	The vulnerability of the selinux_ptracetraceme() function in Linux operating systems allows a hacker to cause a service failure or enhance their privileges.	7 Dec 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the mwifiex_usb_recv function (drivers/net/wireless/marvell/mwifiex/usb.c) in the Linux kernel allows a hacker to cause a service failure.	24 Dec 202100:00	–	bdu_fstec
bdu_fstec	Vulnerability of the hw_atlUtils_fw_rpc_wait function (drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atlUtils.c) in the Linux kernel, allowing a hacker to execute arbitrary code	24 Dec 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the TEE_IOC_OPEN_SESSION or TEE_IOC_INVOKE system call implementations in Linux operating systems allows a malicious actor to trigger a service failure or increase their privileges.	4 Jan 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the pep_sock_accept function in the Linux operating system’s net/phonet/pep.c file, which allows a hacker to gain unauthorized access to protected information.	12 Jan 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the close() and fget() functions in Linux kernel allows a hacker to cause a service failure or enhance their privileges.	12 Jan 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `__rds_conn_create()` function in the Linux operating system allows a hacker to cause a service failure.	12 Jan 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the BPF subsystem in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	12 Jan 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the nf_tables_newset function (net/netfilter/nf_tables_api.c) in Linux operating system kernels, which allows a hacker to cause a service failure	1 Feb 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the IPv6 protocol implementation in Linux operating systems allows a intruder to gain unauthorized access to protected information.	4 Feb 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.89063

SSVC