PT-2022-6577 · Linux +3 · Linux Kernel +3

🗓️ 14 Jan 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Race condition in the Linux kernel remote procedure call bundle handling with missing locks; enables privilege escalation and kernel code execution; no fix available.

Reporter	Title	Published	Views	Family All 21506
BDU FSTEC	Vulnerability of the l2cap_conn_del() function (net/bluetooth/l2cap_core.c) in Linux operating system kernels, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the intel_gvt_dma_map_guest_page() function in Linux kernel allows a hacker to trigger a service failure.	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_reassemble_sdu() function (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a attacker to execute arbitrary code	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the devlink_param_set/devlink_param_get function (net/core/devlink.c) in the Linux operating system’s IPsec kernel component, which allows a attacker to execute arbitrary code	3 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the del_timer function in the drivers/isdn/mISDN/l1oip_core.c file of the Linux kernel allows a hacker to execute arbitrary code.	3 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the net/rose/rose_timer.c component in the Linux operating system allows a hacker to cause a service failure.	22 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.	22 Nov 202200:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the l2cap_connect and l2cap_le_connect_req functions (net/bluetooth/l2cap_core.c) in Linux kernel, allowing a hacker to execute arbitrary code	2 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the l2cap_config_req function (net/bluetooth/l2cap_core.c) in the Linux operating system kernel allows a attacker to execute arbitrary code.	12 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xen-netback driver in Linux operating systems allows a hacker to cause a service failure.	19 Dec 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Dec 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.71737

SSVC