PT-2022-6661 · Linux +4 · Linux Kernel +4

🗓️ 25 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 23 Views

A use after free in the Linux kernel firewire outbound phy packet callback allows a local privileged attacker to trigger use after free when the queue event fails.

Reporter	Title	Published	Views	Family All 1000
Gitee	Exploit for Observable Discrepancy in Intel Atom_C	28 Oct 202014:04	–	gitee
Gitee	Exploit for Observable Discrepancy in Linux Linux_Kernel	11 May 202021:00	–	gitee
Gitee	Exploit for Observable Discrepancy in Linux Linux_Kernel	9 Aug 202010:57	–	gitee
Gitee	Exploit for Double Free in Linux Linux_Kernel	28 Feb 202316:14	–	gitee
Gitee	Exploit for Out-of-bounds Write in Linux Linux_Kernel	12 Jan 202309:59	–	gitee
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	11 Aug 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)	24 Jan 201912:55	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Storage Scale System that are now included	15 Apr 202502:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager has released VM v2.0.1 in response to the vulnerability known as Spectre.	16 Jun 201822:05	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

06 Sep 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8 - 9

CVSS 35.5 - 8.8

CVSS 3.19.1 - 9.8

CVSS 48.6

EPSS0.93838

SSVC