PT-2022-6415 · Linux +5 · Linux Kernel +5

🗓️ 28 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 26 Views

Misinterpretation of the get sg table return value in the malidp planes driver can cause pointer dereference and denial of service.

Reporter	Title	Published	Views	Family All 25134
Information Security Automation	I have finalized the list of trending vulnerabilities for 2024 according to Positive Technologies	20 Jan 202515:02	–	avleonov
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerabilities of Intel, ARM, and AMD processors stem from the unique workings of the branch prediction module, which allows attackers to exploit the protected information.	9 Jan 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the communication standards for IEEE 802.11 operating systems on Windows allows a intruder to inject arbitrary network packets.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sco_sock_sendmsg() function in the HCI subsystem of the Linux operating system allows a hacker to trigger an emergency shutdown of the system or increase their privileges.	4 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Linux operating system kernels, related to deficiencies in input data validation, allows attackers to gain unauthorized access to protected information.	6 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hso_free_net_device function in the Linux kernel’s /net/usb/hso.c driver allows a attacker to compromise privacy, integrity, and accessibility.	12 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rtas_args.nargs function in the arch/powerpc/kvm/book3s_rtas.c driver of the Linux operating system allows a attacker to trigger memory corruption on the host operating system.	12 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to uncontrolled resource consumption, allows a hacker to cause a service failure.	23 Sep 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Notselwyn/CVE-2024-1086
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

25 Mar 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 10

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.92621

SSVC