PT-2022-5140 · Linux +5 · Linux +5

🗓️ 02 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 13 Views

Use-after-free in the Linux kernel 6pack driver may crash the kernel when simulating an ax25 device from user space.

Reporter	Title	Published	Views	Family All 20296
BDU FSTEC	The vulnerability of the `ef100_update_stats` function in the `drivers/net/ethernet/sfc/ef100_nic.c` file of the Linux kernel allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the amvdec_set_canvases() function in the Linux kernel’s drivers/staging/media/meson/vdec/vdec_helpers.c file allows a hacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the lkdtm_ARRAY_BOUNDS function in the drivers/misc/lkdtm/bugs.c module of the Linux kernel allows a attacker to cause a system failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the uapi_finalize() function in the drivers/infiniband/core/uverbs_uapi.c file of the Linux kernel allows a hacker to cause a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the imx_register_uart_clocks() function in the drivers/clk/imx/clk.c file of the Linux kernel allows a hacker to cause system failures or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the malidp_crtc_reset() function in the Linux kernel’s drivers/gpu/drm/arm/malidp_crtc.c file allows a hacker to trigger a service failure or increase their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mtk_vcodec_fw_vpu_init() function in the Linux kernel’s drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c file allows a attacker to cause a service failure or gain increased privileges.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NFS file system driver in Linux operating systems allows a hacker to trigger a service failure.	22 Dec 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the intr_callback() function (drivers/net/usb/r8152.c) in Linux operating system kernels, allowing a hacker to cause a service failure	22 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC