PT-2022-30028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.18 Description A NULL dereference issue exists in the error cleanup of the watch queue functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists where the page array is not freed when the watch queue is dismantled. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Metasploit Weekly Wrap-Up

ManageEngine ADSelfService Plus Authenticated RCE This module is pretty exciting for us because it's for a vulnerability discovered by our very own Rapid7 researchers Jake Baines, Hernan Diaz, Andrew Iwamaye, and Dan Kelly. The vulnerability allowed for attackers to leverage the "custom script"...

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state potentially allowing a local user to gain privileged access or cause a denial of service on the system.

...

DEBIAN-CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

UBUNTU-CVE-2022-0995

An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...

PT-2025-8184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the watch queue functionality. The free watch function fails to properly free the watch object, leading to a...

PT-2025-8185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue in the watch queue set size function can occur when the error cleanup code attempts to free buffer pages that were not allocated. This can lead to a null pointer...

Linux Kernel Buffer Error Vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to an elevation of privilege vulnerability, which stems from watchqueue triggering a memory corruption in the Linux kernel that could be exploited by an attacker to gain elevat...

PT-2022-7461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the watch queue set filter function in the Linux kernel, where a couple of places check that the filter type value does not exceed what the type filter...

PT-2022-2006

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc8 Description An out-of-bounds OOB memory write flaw exists in the watch queue event notification subsystem. This issue allows a local user to overwrite parts of the kernel state, which can lead to a denia...