PT-2022-7350 · Linux +2 · Linux Kernel +2

🗓️ 15 Sep 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Linux kernel before six has use-after-free in io uring caused by io fput file ref counting with fixed files.

Reporter	Title	Published	Views	Family All 5595
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	12 Jan 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and Apache Axis can affect IBM Storage Protect Plus	31 Jan 202411:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and Golang Go might affect IBM Spectrum Copy Data Management	17 Jan 202316:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel may affect IBM Spectrum Protect Plus	16 Mar 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel and Python can affect IBM Spectrum Protect Plus	19 Sep 202313:44	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/randorisec/CVE-2022-34918-LPE-PoC
github	www.github.com/veritas501/CVE-2022-34918
github	www.github.com/bluefrostsecurity/CVE-2023-2008
github	www.github.com/Pwnzer0tt1/CVE-2022-36946
github	www.github.com/veritas501/CVE-2022-3910
github	www.github.com/hyeonjun17/CVE-2022-2590-analysis
web	www.web.archive.org/web/20250000000000*/https:/github.com/Sechack06/CVE-2022-34918
web	www.web.archive.org/web/20250000000000*/https:/github.com/trhacknon/CVE-2022-34918-LPE-PoC
web	www.web.archive.org/web/20250000000000*/https:/github.com/V4bel/CVE-2022-41218

11 Dec 2023 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8 - 9.8

CVSS 27.2

EPSS0.60016

SSVC