PT-2022-4782 · Linux +9 · Linux Kernel +9

🗓️ 07 Mar 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

A use-after-free in Linux kernel FUSE write allows local users to access data and escalate privileges.

Reporter	Title	Published	Views	Family All 23400
bdu_fstec	The vulnerability of Intel microprocessor microprogramming software, related to improper cleaning or release of resources, allows a hacker to cause a service failure.	23 Jun 202200:00	–	bdu_fstec
bdu_fstec	Vulnerability of the dx_insert_block() function (fs/ext4/namei.c) in the Linux operating system kernel, which allows a hacker to cause a service failure	23 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the copy_info_records_to_user() function in Linux operating systems allows a malicious actor to escalate their privileges or cause service failures.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementations of preparse_server_key(), free_preparse_server_key(), and destroy_server_key() functions of Linux operating systems allows a hacker to trigger a service failure.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the implementation of the acrn_dev_ioctl() function of the ACRN hypervisor service module in Linux kernels allows a attacker to disclose sensitive information or cause service failures.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, related to insufficient entropy, allows attackers to identify clients.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the net/netfilter/nf_tables_api.c component of the Linux kernel’s netfilter subsystem allows a attacker to elevate their privileges to the root level.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the btrfs_alloc_tree_b function (fs/btrfs/extent-tree.c) in the file system of the Linux operating system allows a hacker to cause a service failure.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the rpmsg_probe function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to cause a service failure.	29 Jun 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the `rpmsg_virtio_add_ctrl_dev` function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to trigger a service failure.	29 Jun 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588

23 Sep 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC