PT-2022-7112 · Linux +5 · Linux Kernel +5

🗓️ 23 Aug 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Use after free in Linux kernel NILFS may crash the system or escalate privileges after security inode alloc fails.

Reporter	Title	Published	Views	Family All 19994
BDU FSTEC	The vulnerability of the qdisc_graft function (net/sched/sch_api.c) in the Linux kernel’s traffic management subsystem allows a attacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the driver drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c in the Linux operating system, allowing a hacker to execute arbitrary code	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s Network File System kernel allows a hacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions gru_set_context_option(), gru_fault(), and gru_handle_user_call_os() in the SGI GRU kernel of the Linux operating system allow attackers to cause service failures or gain increased privileges.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the filelock_init function in the locking mechanism (fs/locks.c) of the Linux operating system allows a hacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the atm_tc_enqueue() function in the network packet scheduling subsystem (net/sched/sch_atm.c) of the Linux kernel allows a attacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cbq_classify() function in the network packet scheduling subsystem (net/sched/sch_cbq.c) in the Linux kernel allows a attacker to cause a service failure.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver drivers/net/wireless/rndis_wlan.c of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netfilter component in the Linux operating system allows a hacker to gain unauthorized access to protected information and increase their privileges.	25 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nilfs_attach_log_writer function (fs/nilfs2/segment.c) in the Linux kernel’s BPF component allows a attacker to cause a service failure.	30 Jan 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386

14 Aug 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8 - 9.8

CVSS 22.7 - 9

CVSS 35.5 - 8.8

CVSS 48.6

EPSS0.67994

SSVC