PT-2022-3466 · Linux+5 · Linux Kernel+5

Minh Yuan · Published 2022-05-25 · Updated 2023-08-14 · CVE-2022-1652

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is caused by a concurrency use-after-free flaw in the bad flp intr function, allowing a local attacker to execute arbitrary code on the system or cause a denial of service condition. This can be achieved by executing a specially-crafted program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-1944

ALT-PU-2022-1946

ALT-PU-2022-1969

ALT-PU-2022-1971

ALT-PU-2022-1972

ALT-PU-2022-1973

ALT-PU-2022-1974

ALT-PU-2022-2037

ALT-PU-2022-2038

ALT-PU-2022-2052

ALT-PU-2022-2099

ALT-PU-2022-2136

ALT-PU-2022-2137

ALT-PU-2022-2152

ALT-PU-2022-2155

ALT-PU-2022-2344

ALT-PU-2023-4894

AZL-9878

BDU:2022-04244

CVE-2022-1652

DSA-5173-1

OESA-2022-1677

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2022:3342-1

SUSE-SU-2022:3350-1

SUSE-SU-2022:3359-1

SUSE-SU-2022:3360-1

SUSE-SU-2022:3368-1

SUSE-SU-2022:3370-1

SUSE-SU-2022:3373-1

SUSE-SU-2022:3407-1

SUSE-SU-2022:3409-1

SUSE-SU-2022:3424-1

SUSE-SU-2022:3433-1

SUSE-SU-2022:3445-1

SUSE-SU-2022:3464-1

SUSE-SU-2022:3476-1

SUSE-SU-2022_3360-1

SUSE-SU-2022_3409-1

SUSE-SU-2022_3424-1

SUSE-SU-2023:0416-1

USN-5500-1

USN-5505-1

USN-5513-1

USN-5529-1

USN-5544-1

USN-5560-1

USN-5560-2

USN-5562-1

USN-5564-1

USN-5566-1

USN-5582-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 765

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Markakd/CVE-2022-2588 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit