PT-2022-6661 · Linux +4 · Linux Kernel +4

🗓️ 25 Apr 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

A use after free in the Linux kernel firewire outbound phy packet callback allows a local privileged attacker to trigger use after free when the queue event fails.

Reporter	Title	Published	Views	Family All 23423
bdu_fstec	The vulnerability of the `clear_bss` function in Linux operating system kernels, related to errors during the clearing of the initial symbol of a block (.bss), allows an attacker to execute arbitrary code.	1 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the `nft_set_elem_init` function of the `net/netfilter/nf_tables_api.c` file, belonging to the User Namespace Handler component in the Linux operating system’s kernel, allows a hacker to gain root access.	2 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Linux operating system’s kernel, allowing a hacker to execute arbitrary code	10 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the reserve_sfa_size() function in the openvswitch module of the Linux operating system allows a hacker to increase their privileges or cause service failures.	15 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to disclose protected information.	16 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the kvm_dirty_ring_push function (virt/kvm/dirty_ring.c) in the KVM virtualization subsystem of the Linux operating system allows a hacker to trigger a service failure.	22 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the netback driver for Linux operating systems allows a hacker to trigger a service failure.	30 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the nfcmrvl_nci_unregister_dev() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability of the usb_8dev_start_xmit function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Aug 202200:00	–	bdu_fstec
bdu_fstec	The vulnerability in the arch/x86/kvm/lapic.c component of the KVM virtualization subsystem in the Linux operating system’s kernel allows a attacker to cause a service failure.	31 Aug 202200:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

06 Sep 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 26.8 - 9

CVSS 35.5 - 8.8

CVSS 3.19.1 - 9.8

CVSS 48.6

EPSS0.93838

SSVC