PT-2022-5912 · Linux +5 · Linux Kernel +5

🗓️ 14 Mar 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Linux kernel up to 5.16-rc6 has null pointer in netvsc ethtool stats, risking DoS or elevation.

Reporter	Title	Published	Views	Family All 23585
BDU FSTEC	The vulnerability of the sock_getsockopt() function in the Linux operating system’s kernel allows a hacker to induce a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the io-workqueue in the Linux operating system allows a hacker to cause a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the KVM virtualization subsystem in the Linux operating system allows a hacker to trigger a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the net/llc/af_llc.c component in the Linux operating system allows a hacker to trigger a service failure.	14 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the general input/output buffer system with memory display on Intel processors’ MMIO instructions allows attackers to disclose protected information.	21 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability relates to the set of development tools called Intel Software Guard Extensions SDK, as well as microsoftware such as Intel SGX DCAP and SGX PSW. This vulnerability stems from operations that involve writing to memory beyond the buffer boundaries, allowing attackers to disclose sensitive information.	23 Jun 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the dx_insert_block() function (fs/ext4/namei.c) in the Linux operating system kernel, which allows a hacker to cause a service failure	23 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the copy_info_records_to_user() function in Linux operating systems allows a malicious actor to escalate their privileges or cause service failures.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementations of preparse_server_key(), free_preparse_server_key(), and destroy_server_key() functions of Linux operating systems allows a hacker to trigger a service failure.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the acrn_dev_ioctl() function of the ACRN hypervisor service module in Linux kernels allows a attacker to disclose sensitive information or cause service failures.	29 Jun 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC