Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PT-2022-6242 · Linux +5 · Linux Kernel +5

🗓️ 11 Oct 2022 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 23 Views

Remote use after free in Linux kernel nilfs new inode (BPF); patch recommended.

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability in the ioctl cmd PIO_FONT function of Linux kernel allows a hacker to execute arbitrary code with elevated privileges.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `aspeed_lpc_ctrl_mmap` function in the drivers/soc/aspeed/aspeed-lpc-ctrl.c file of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the diFree function (fs/jfs/inode.c) in the Journaled File System (JFS) of the Linux operating system allows a attacker to disclose protected information or cause service failures.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Linux kernel driver for USB 2.0/3.0 Gigabit Ethernet devices based on the ASIX AX88179_178A chip allows a perpetrator to obtain potentially confidential information.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the implementation of proxy-virtualized TPM devices in Linux operating systems allows a hacker to increase their privileges within the system.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the em28xx_usb_probe function in the video4linux driver of Linux operating systems allows attackers to gain increased privileges.
21 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the verifier functions ebpf in the bpf_map_update_elem and bpf_map_freeze components of the Linux operating system’s kernel/bpf/syscall.c module allows a attacker to compromise data integrity.
23 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the bpf_jit_insn component (arch/s390/net/bpf_jit_comp.c) in the Linux operating system allows a hacker to gain access to confidential data.
23 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Linux operating system’s GPU i915 kernel driver allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
23 Sep 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability at the sysfs level of the Linux operating system allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
23 Sep 202200:00
–bdu_fstec
Rows per page
SourceLink
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
githubwww.github.com/tr3ee/CVE-2022-23222
githubwww.github.com/Bonfee/CVE-2022-0995
githubwww.github.com/Markakd/CVE-2022-2588
githubwww.github.com/Bonfee/CVE-2022-25636
githubwww.github.com/xkaneiki/CVE-2023-0386
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Jan 2024 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17 - 9.8
CVSS 22.7 - 9
CVSS 35.5 - 8.8
CVSS 48.6
EPSS0.71737
SSVC
linux kernelnilfs new inodebpf componentuse after freedenial of servicepatch recommended
23