PT-2022-6438 · Linux +2 · Linux Kernel +2

🗓️ 01 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

Local user can escalate privileges due to unauthorized access in the Linux kernel Overlay filesystem by copying from a nosuid mount.

Reporter	Title	Published	Views	Family All 18689
bdu_fstec	The vulnerability of the Linux operating system’s driver/drivers/hid/hid-bigbenff.c code, related to writing beyond buffer boundaries in memory, allows an attacker to cause a service failure or increase their privileges.	13 Oct 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the NILFS file system driver in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.	11 Nov 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the log_replay function in the fs/ntfs3/fslog.c component of the Linux operating system allows a hacker to gain access to confidential data and also trigger a service failure.	26 Dec 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability in the net/netfilter/nf_tables_api.c component of the Linux operating system allows a hacker to cause a service failure.	26 Dec 202300:00	–	bdu_fstec
bdu_fstec	The vulnerability of the sess_free_buffer() function in the fs/cifs/sess.c module of the SMB file system in the Linux operating system allows a hacker to cause a service failure.	16 May 202400:00	–	bdu_fstec
bdu_fstec	The vulnerability of the function io_files_update_with_index_alloc() in the fs/io_uring.c module of the io_uring component of the Linux operating system allows a attacker to cause a service failure.	16 May 202400:00	–	bdu_fstec
bdu_fstec	The vulnerability of the macvlan_handle_frame() function in the drivers/net/macvlan.c file of the Linux kernel’s networking component allows a hacker to cause a service failure.	28 May 202400:00	–	bdu_fstec
bdu_fstec	The vulnerability of the damon_sysfs_add_target() function in the mm/daemon/sysfs.c file, a memory management subsystem of the Linux operating system, allows a hacker to trigger a service failure.	28 May 202400:00	–	bdu_fstec
bdu_fstec	The vulnerability of the io_uring subsystem in the Linux operating system allows a hacker to increase their privileges.	28 May 202400:00	–	bdu_fstec
bdu_fstec	The vulnerability of the psi_trigger_poll() function in the kernel/sched/psi.c module of the PSI resource management system in Linux’s operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	28 May 202400:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.17.8 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC