PT-2022-5911 · Linux +4 · Linux Kernel +4

🗓️ 03 Mar 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Linux kernel up to 5.16-rc6 has a pointer dereference in wm8350 power.c causing DoS.

Reporter	Title	Published	Views	Family All 19546
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a hacker to trigger a service failure.	13 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver/hid/hid-bigbenff.c kernel of the Linux operating system, which allows a hacker to trigger a service failure.	15 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `ib_prctl_set()` function in the Linux operating system’s kernel allows a hacker to gain access to protected information.	15 Feb 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Infrared Transceiver USB driver allows a hacker to trigger a service failure.	3 Mar 202300:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the ntfsattr_find() function (fs/ntfs/attrib.c) in Linux operating system kernels, allowing a hacker to cause a service failure	3 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MPLS (Multiprotocol Label Switching) kernel in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of data.	7 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Qualcomm USB 3.0 driver in the Linux operating system allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drm_gem_shmem_get_sg_table function (drivers/gpu/drm/virtio/virtgpu_object.c) in the Linux kernel allows a hacker to trigger a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wireless communication subsystem in the Linux kernel’s net/mac802154/llsec.c module, which allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the memory manager in the ipc/util.c module of the Linux operating system allows a hacker to cause a service failure.	15 Mar 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC