PT-2022-6439 · Kvm +7 · Kvm +7

🗓️ 24 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

KVM AMD nested virtualization may cause host kernel panic due to improper nested shutdown handling.

Reporter	Title	Published	Views	Family All 18690
BDU FSTEC	The vulnerability in the Linux operating system’s IEEE 1394 (FireWire) driver core allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	16 Jun 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the amd_sfh_hid_client_init() function in the AMD Sensor Fusion Hub driver for Linux operating systems allows a hacker to induce a service failure.	11 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the submit_lookup_cmds() function in Linux operating systems allows a hacker to cause a service failure.	13 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mctp_unregister() function in Linux operating systems allows a hacker to trigger a service failure.	13 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the seg6genl_sethmac function in the Linux operating system allows a hacker to disclose sensitive information that is protected by this function.	18 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Amateur Radio X.25 PLP (Rose) kernel implementation in the Linux operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.	19 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the idt77252_exit() function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	1 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tun_napi_alloc_frags() function in the drivers/net/tun.c module of the Linux TUN/TAP driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.	7 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s PCMCIA kernel driver allows a hacker to trigger a service failure or cause other adverse effects.	24 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s PCMCIA kernel driver allows a hacker to cause a service failure or exert other adverse effects.	24 Aug 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

12 Aug 2024 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC