PT-2022-6415 · Linux +5 · Linux Kernel +5

🗓️ 28 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Misinterpretation of the get sg table return value in the malidp planes driver can cause pointer dereference and denial of service.

Reporter	Title	Published	Views	Family All 25246
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	23 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ccp-ops crypto driver in the Linux operating system allows a hacker to cause a service failure.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Bluetooth subsystem, which allows a hacker to trigger an emergency shutdown of the system	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the vt_k_ioctl function in the Linux operating system’s kernel, which allows a hacker to disclose protected information	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ccp_run_aes_gcm_cmd() function in the Linux operating system allows a hacker to trigger a service failure.	30 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to information disclosure through discrepancies, allows attackers to read a portion of the kernel’s memory.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to the exposure of information through inconsistencies, allows attackers to obtain confidential information.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the kernel/bpf/hashtab.c component of the Linux operating system, related to writing beyond buffer boundaries in memory, allows an attacker to compromise the integrity, accessibility, and confidentiality of data.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the drivers/usb/host/max3421-hcd.c component of the Linux operating system’s kernel lies in the use of memory after it is freed, allowing an attacker to trigger a service failure.	5 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_writeinline_data_end function (fs/ext4/inline.c) in the Linux kernel allows a attacker to compromise the integrity, accessibility, and confidentiality of data.	5 Oct 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Notselwyn/CVE-2024-1086
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

25 Mar 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 10

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.93838

SSVC