PT-2022-7127 · Linux +8 · Linux Kernel +8

🗓️ 06 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Linux kernel TCP getsockopt and setsockopt synchronization error causing a race condition.

Reporter	Title	Published	Views	Family All 19938
BDU FSTEC	The vulnerability of the hci_disconn_phylink_complete_evt() function in the net/bluetooth/hci_event.c module of the Bluetooth subsystem of the Linux operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.	26 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the function ieee80211_vif_use_reserved_context() in the module net/mac80211/chan.c of the Linux kernel’s mac80211 stack allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	26 Aug 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the mt76_sta_add() function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – A driver for supporting Mediatek wireless adapter devices in the Linux operating system, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.	1 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the btf_id_set_contains() function in the kernel/bpf/btf.c module, which supports the BPF interpreter in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	1 Sep 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the cxl_decoder_release() function in the drivers/cxl/core/bus.c module – The CXL Device Support Driver for Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	1 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hci_cmd_sync_queue() function in the net/bluetooth/hciSync.c module of the Bluetooth subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	1 Sep 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of functions ndo_uninit() and dev->priv_destructor() in the Linux operating system’s kernel, allowing a hacker to trigger a service failure	6 Oct 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the calculate_sizes() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.	5 Nov 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the strscpy() function in the Linux operating system’s kernel allows a hacker to cause a service failure.	14 Nov 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iavfremove function in Linux operating systems allows a hacker to trigger a service failure.	14 Nov 202500:00	–	bdu_fstec

Source	Link
github	www.github.com/Markakd/CVE-2022-2588
github	www.github.com/theori-io/CVE-2022-32250-exploit
github	www.github.com/0x0000000000-03/CVE-2022-2639-PipeVersion
github	www.github.com/bb33bb/CVE-2022-2639-PipeVersion
github	www.github.com/avboy1337/CVE-2022-2639-PipeVersion
github	www.github.com/kiks7/CVE-2022-2602-Kernel-Exploit
github	www.github.com/LukeGix/CVE-2022-2602
github	www.github.com/Pwnzer0tt1/CVE-2022-36946
github	www.github.com/aels/CVE-2022-2586-LPE
github	www.github.com/BassamGraini/CVE-2022-2588

27 Mar 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.1 - 9.8

CVSS 22.7 - 7.5

CVSS 35.5 - 7.5

EPSS0.92621

SSVC