PT-2022-5898 · Linux +4 · Linux Kernel +4

🗓️ 25 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Linux kernel xen-netback driver has incorrect locking causing denial of service; affected versions are unspecified and no fix is known.

Reporter	Title	Published	Views	Family All 20614
BDU FSTEC	The vulnerability of the SMB subsystem in Linux operating systems allows a perpetrator to trigger a service failure.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wireless network driver WILC1000 for Linux operating systems allows a hacker to trigger a service failure or increase the level of privileges.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WILC1000 wireless network driver for Linux operating systems allows a hacker to execute arbitrary code or cause a service failure.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in the Linux operating system allows a hacker to gain unauthorized access and increase their privileges.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the smb2_write function (fs/ksmbd/smb2pdu.c) in the ksmbd module of the Linux operating system allows a hacker to disclose protected information or cause service failures.	29 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GPU i915 driver core in Linux operating systems allows attackers to increase their privileges or cause service failures.	10 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kfree_skb() function in the xen-netback driver of Linux kernel allows a hacker to trigger a service failure.	16 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the network card driver (drivers/net/xen-netback/netback.c) in Linux operating systems, which allows a hacker to cause a service failure	23 Jan 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.2 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC