PT-2022-4893 · Linux +6 · Linux Kernel +6

🗓️ 08 Sep 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Linux kernel up to 5.19.9 lacks memset in stex queuecommand lck for PASSTHRU CMD, risking memory exposure.

Reporter	Title	Published	Views	Family All 21681
bdu_fstec	The vulnerability of the ax25_release() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.	21 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the implementation of the Amateur Radio AX.25 kernel in the Linux operating system allows a intruder to cause a service failure.	21 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the asynchronous input/output interface io_uring in Linux kernel allows a hacker to escalate their privileges.	21 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerabilities of the functions unix_sock_destructor() and unix_release_sock() in the BPF subsystem of Linux kernel allow a attacker to cause a service failure.	26 Oct 202200:00	–	bdu_fstec
bdu_fstec	Vulnerability of the l2cap_recv_acldata() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a hacker to trigger a service failure	31 Oct 202200:00	–	bdu_fstec
bdu_fstec	Vulnerability of the l2cap_conn_del() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the intel_gvt_dma_map_guest_page() function in Linux kernel allows a hacker to trigger a service failure.	31 Oct 202200:00	–	bdu_fstec
bdu_fstec	Vulnerability of the l2cap_reassemble_sdu() function (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the devlink_param_set/devlink_param_get function (net/core/devlink.c) in the Linux operating system’s IPsec kernel component, which allows a attacker to execute arbitrary code	3 Nov 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

25 Mar 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.5 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC