PT-2022-7346 · Linux +1 · Linux Kernel +1

🗓️ 09 Jul 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

A null pointer dereference in the Linux kernel's io uring component could crash the system.

Reporter	Title	Published	Views	Family All 18520
BDU FSTEC	The vulnerability of the Linux operating system’s PCMCIA kernel driver allows a hacker to trigger a service failure or cause other adverse effects.	24 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s PCMCIA kernel driver allows a hacker to cause a service failure or exert other adverse effects.	24 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `drivers/media/usb/ttusb-dec/ttusb_dec.c` component of the Linux kernel allows a attacker to perform a “denial-of-service” attack.	5 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the driver/char/xillybus/xilliusb.c component of the Linux operating system allows a hacker to increase their privileges within the system.	5 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Linux operating system’s driver/drivers/hid/hid-bigbenff.c code, related to writing beyond buffer boundaries in memory, allows an attacker to cause a service failure or increase their privileges.	13 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NILFS file system driver in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.	11 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the free_pipe_info function in the fs/pipe.c file of the Linux kernel allows a hacker to increase their privileges.	20 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the log_replay function in the fs/ntfs3/fslog.c component of the Linux operating system allows a hacker to gain access to confidential data and also trigger a service failure.	26 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the net/netfilter/nf_tables_api.c component of the Linux operating system allows a hacker to cause a service failure.	26 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mctp_sk_unhash() function in the net/mctp/af_mctp.c module, which is part of the MCTP protocol implementation in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	16 May 202400:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/tr3ee/CVE-2022-23222
github	www.github.com/Bonfee/CVE-2022-0995
github	www.github.com/Bonfee/CVE-2022-25636
github	www.github.com/xkaneiki/CVE-2023-0386
github	www.github.com/Crusaders-of-Rust/CVE-2022-0185

14 Aug 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.15.5 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.67994

SSVC