PT-2022-6186 · Linux +8 · Linux Kernel +8

🗓️ 30 Jun 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 8 Views

Memory after free in area cache get function of IPsec in Linux Kernel allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 24835
BDU FSTEC	The vulnerability in the implementation of the TCP protocol in Linux operating systems allows a perpetrator to carry out a “man-in-the-middle” attack.	28 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the fs/quota/quota_tree.c component of Linux operating systems allows a hacker to trigger a service failure.	28 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the esp4 and esp6 modules in the Linux kernel allow attackers to enhance their privileges.	30 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the watch_queue component in the Linux operating system allows a hacker to execute arbitrary code with root privileges.	30 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nf_tables module of the netfilter subsystem in Linux operating systems allows attackers to increase their privileges.	31 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nf_tables module of the netfilter subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.	31 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the tc_new_tfilter() function in Linux operating systems allows a hacker to increase their privileges.	31 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `add_partition` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.	4 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the xs_xprt_free() function in the Sun RPC (Open Network Computing Remote Procedure Call) kernel of Linux operating systems allows a attacker to cause a service failure.	12 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the gc_data_segment function (fs/f2fs/gc.c) in the Linux operating system kernel allows a hacker to trigger a service failure.	15 Apr 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

20 Feb 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.71737

SSVC