Metasploit Weekly Wrap-Up

Metasploit 6.3 is out! Earlier this week we announced the release of Metasploit 6.3 which came with a tonne of new modules and improvements. The whole team worked super hard on this and we're very excited that everyone can now get their hands on it and all of the new features it has to offer! I...

io_uring Same Type Object Reuse Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'iouring Same Type Object Reuse Priv Esc', 'Description' = %q This module exploits a bug in iouring leading to an additional putcred that can be...

CVE-2022-1043

creationtimestamp| type| source ---|---|--- 2022-08-29 18:34:16+00:00| seen| https://t.me/cibsecurity/48970 2023-02-01 16:16:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve20221043iouringprivesc.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-1043

A flaw was found in the Linux kernel’s iouring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges...

CVE-2022-1043

CVE-2022-1043 concerns a flaw in the Linux kernel io_uring implementation that lets a local attacker corrupt memory, crash the system, or escalate privileges. The connected Nessus advisories (Unity Linux UTSA-2026-004760/003973) reproduce via kernel io_uring flaw; no specific patched version is l...