PT-2022-5925 · Linux +6 · Linux Kernel +6

🗓️ 19 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Flaw in Linux kernel networking allows local users to crash system causing denial of service.

Reporter	Title	Published	Views	Family All 22186
bdu_fstec	The vulnerability of the pxa3xx_gcu_write function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.	6 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the NFC controller interface (NCI) in the Linux operating system allows a hacker to increase their privileges.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the sctp_make_strreset_req function (net/sctp/sm_make_chunk.c) in the Linux operating system allows a hacker to trigger a service failure.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the component drivers/firmware/EFI/capsule-loader.c of the Linux operating system allows a hacker to increase their privileges or cause service failures.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the vmw_cmd_res_check function in the vmwgfx driver (drivers/gpu/vmxgfx/vmxgfx_execbuf.c) of the Linux kernel allows a malicious actor to increase their privileges or cause service failures.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	Vulnerability of the vmw_execbuf_tie context driver’s function in the vmwgfx driver (drivers/gpu/vmxgfx/vmxgfx_execbuf.c) in the Linux operating system, which allows a malicious actor to increase their privileges or cause service failures.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the xfrm_expand_policies function (net/xfrm/xfrm_policy.c) in the Linux operating system allows a hacker to trigger a service failure.	12 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the OverlayFS subsystem in Linux kernel allows a hacker to trigger a service failure.	14 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the shmget() function in the Linux operating system allows a hacker to gain access to confidential data and compromise its integrity.	14 Sep 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s sound subsystem allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	14 Sep 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

25 Jun 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC