PT-2022-6186 · Linux +8 · Linux Kernel +8

🗓️ 30 Jun 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Memory after free in area cache get function of IPsec in Linux Kernel allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	11 Aug 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2022-3435	20 Feb 202315:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)	23 May 202417:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel, MongoDB, Python, Samba, OpenSSL and cURL libcurl affect IBM Spectrum Protect Plus	10 Apr 202507:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance	11 Jan 202416:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities	7 Jun 202415:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data has a vulnerable base OS image due to kernel-headers ( CVE-2022-1012, CVE-2022-32250 )	3 Feb 202523:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	13 May 202511:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

20 Feb 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.8 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.71737

SSVC