PT-2022-2644 · Linux+5 · Linux Kernel+5

Bing-Jhong Billy Jheng · Publicado 2021-04-09 · Atualizado 2022-10-19 · CVE-2022-1116

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Versões do kernel do Linux anteriores à 5.4.189

Descrição

O problema está relacionado a um estouro de inteiro na interface io uring do Kernel do Linux, que pode ser explorado por um invasor local para causar corrupção de memória e escalar privilégios até o nível root.

Recomendações

Para versões do Kernel do Linux anteriores à 5.4.189, atualize para a versão 5.4.189 ou posterior para resolver o problema.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2022-1713

BDU:2022-03104

CVE-2022-1116

LSN-0086-1

OPENSUSE-SU-2022_2741-1

OPENSUSE-SU-2022_2875-1

SUSE-SU-2022:2214-1

SUSE-SU-2022:2216-1

SUSE-SU-2022:2230-1

SUSE-SU-2022:2237-1

SUSE-SU-2022:2239-1

SUSE-SU-2022:2245-1

SUSE-SU-2022:2262-1

SUSE-SU-2022:2516-1

SUSE-SU-2022:2741-1

SUSE-SU-2022:2761-1

SUSE-SU-2022:2809-1

SUSE-SU-2022:2875-1

SUSE-SU-2022:2875-2

SUSE-SU-2022:2892-1

SUSE-SU-2022:2892-2

SUSE-SU-2022:3080-1

SUSE-SU-2022:3088-1

SUSE-SU-2022_3080-1

USN-5442-1

USN-5442-2

Produtos afetados

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

Referências · 191

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/theori-io/CVE-2022-32250-exploit · Exploit
• 🔥 https://github.com/0x0000000000-03/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/avboy1337/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/bb33bb/CVE-2022-2639-PipeVersion · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/Pwnzer0tt1/CVE-2022-36946 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/ysanatomic/CVE-2022-32250-LPE · Exploit
• 🔥 https://github.com/cgwalters/container-cve-2021-22555 · Exploit