PT-2022-5202 · Linux +4 · Linux Kernel +4

🗓️ 29 Sep 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 28 Views

Use-after-free in unix sock destructor and unix release sock in BPF causes denial of service and memory leak.

Reporter	Title	Published	Views	Family All 18901
BDU FSTEC	The vulnerability of the virt_to_bus()/bus_to_virt() function in the dpt_i2o driver of Linux operating systems allows attackers to exploit their privileges.	10 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the SCTP protocol in Linux kernel allows a attacker to cause a service failure (to disconnect the connection).	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the do_prlimit() function in Linux operating systems allows a perpetrator to gain unauthorized access to protected information.	12 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the SCTP protocol in the Linux operating system allows a hacker to cause a service failure.	15 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the can_rcv_filter() function in the net/can/af_can.c module of the Linux kernel’s operating system allows a hacker to cause a service failure.	15 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rxrpc_unbundle_conn() function in Linux operating systems allows a hacker to enhance their privileges.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the NET/ROM network protocol of the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_xattr_set_entry() function in the fs/ext4/xattr.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the x86_emulate_insn function in the arch/x86/kvm/emulate.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_steal_time_set_preempted() function in the arch/x86/kvm/x86.c module of the Linux operating system allows a hacker to gain access to protected information.	24 May 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

25 Jan 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC