Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PT-2023-8696 · Linux +5 · Linux Kernel +5

🗓️ 28 Nov 2023 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Linux kernel f2fs rename() may corrupt dirents in directory rename, enabling privilege escalation.

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability of the gfs2_rgrp_dump() function in the fs/gfs2/rgrp.c file of the Linux kernel’s GFS2 file system allows a attacker to cause a service failure.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `efivarfs_reconfigure()` function in the `fs/efivarfs/super.c` file of the EFI File System kernel of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `check_stack_slot_within_bounds()` function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the bpf_map_put() function in the kernel/bpf/syscall.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the dlpar_memory_remove_by_index() function in the Linux operating system’s PowerPC PSeries kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the ext4_mbgenerate_buddy() function in the fs/ext4/mballoc.c file of the Linux kernel’s file system ext4 allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the rsa_check_exponent_fips() function in the crypto/rsa.c module of the Linux operating system’s RSA implementation allows a hacker to compromise the accessibility of the protected information.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the VFIO PCI kernel driver of the Linux operating system allows a hacker to trigger a service failure.
11 Mar 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `nvmet_tcp_build_pdu_iovec()` function in the `drivers/nvme/target/tcp.c` file of the Linux NVMe kernel driver allows a attacker to cause a service failure.
11 Mar 202400:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Nov 2024 00:00Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.17.8 - 10
EPSS0.71737
SSVC
linux kerneldirent corruptiondirectory renameprivilege escalation
17