PT-2023-3974 · Linux +10 · Linux Kernel +10

🗓️ 06 Jul 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 28 Views

A use-after-free in the Linux kernel net/sched cls fw could enable local privilege escalation.

Reporter	Title	Published	Views	Family All 13177
IBM Security Bulletins	Security Bulletin: Multiple Linux Kernel vulnerabilities may affect IBM Elastic Storage System	11 Aug 202317:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to 3RD PARTY CPU hardware utilizing speculative execution cache timing side-channel analysis known as Variant 4 or SpectreNG (CVE-2018-3639, CVE-2018-3640)	24 Jan 201912:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-42753, CVE-2023-5178, CVE-2023-47710, CVE-2023-45871)	23 May 202417:59	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Storage Scale System that are now included	15 Apr 202502:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	13 May 202511:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	27 Sep 202418:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	15 Dec 202313:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/gameoverlay_privesc.rb
github	www.github.com/synacktiv/CVE-2023-35001
github	www.github.com/g1vi/CVE-2023-2640-CVE-2023-32629
github	www.github.com/ThrynSec/CVE-2023-32629-CVE-2023-2640---POC-Escalation
github	www.github.com/lrh2000/CVE-2023-2002
github	www.github.com/lanleft/CVE-2023-1829
github	www.github.com/TurtleARM/CVE-2023-3338-DECPwn
github	www.github.com/kaotickj/Check-for-CVE-2023-32629-GameOver-lay
github	www.github.com/syedhafiz1234/nftables-oob-read-write-exploit-CVE-2023-35001-
github	www.github.com/google/security-research/tree/master/pocs/linux/kernelctf

22 Aug 2024 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8 - 10

CVSS 27.5

CVSS 35.5

EPSS0.60631

SSVC