PT-2023-3973 · Linux +9 · Linux Kernel +9

🗓️ 13 Jul 2023 00:00:00Reported by Positive TechnologiesType

Out-of-bounds write in Linux kernel net/sched sch_qfq enables local privilege escalation with lmax.

Reporter	Title	Published	Views	Family All 16222
attackerkb	CVE-2023-34255	31 May 202320:15	–	attackerkb
attackerkb	CVE-2022-48502	31 May 202320:15	–	attackerkb
attackerkb	CVE-2023-53039	2 May 202516:15	–	attackerkb
attackerkb	CVE-2023-38430	18 Jul 202300:15	–	attackerkb
attackerkb	CVE-2023-53095	2 May 202516:15	–	attackerkb
attackerkb	CVE-2023-53077	2 May 202516:15	–	attackerkb
attackerkb	CVE-2023-53084	2 May 202516:15	–	attackerkb
attackerkb	CVE-2023-3212	23 Jun 202320:15	–	attackerkb
attackerkb	CVE-2023-35829	18 Jun 202322:15	–	attackerkb
attackerkb	CVE-2023-2007	24 Apr 202323:15	–	attackerkb

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/gameoverlay_privesc.rb
github	www.github.com/synacktiv/CVE-2023-35001
github	www.github.com/g1vi/CVE-2023-2640-CVE-2023-32629
github	www.github.com/ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation
github	www.github.com/lrh2000/CVE-2023-2002
github	www.github.com/lanleft/CVE-2023-1829
github	www.github.com/TurtleARM/CVE-2023-3338-DECPwn
github	www.github.com/kaotickj/Check-for-CVE-2023-32629-GameOver-lay
github	www.github.com/syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-
github	www.github.com/google/security-research/tree/master/pocs/linux/kernelctf

22 Aug 2024 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8 - 10

CVSS 27.5

EPSS0.60631

SSVC