PT-2022-4833 · Linux+9 · Linux Kernel+9

Tvrtko Ursulin · Published 2022-01-25 · Updated 2024-06-15 · CVE-2022-0330

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality, allowing a local user to crash the system or escalate their privileges on the system. This flaw can also be exploited to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

ALSA-2022:0825

ALT-PU-2022-1365

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-9238

BDU:2022-05890

CESA-2022_0620

CESA-2022_0819

CESA-2022_0825

CESA-2022_0849

CVE-2022-0330

DLA-2940-1

DLA-2941-1

DSA-5092-1

DSA-5096-1

MGASA-2022-0041

MGASA-2022-0042

OESA-2022-1534

OPENSUSE-SU-2022:0363-1

OPENSUSE-SU-2022:0366-1

OPENSUSE-SU-2022:0370-1

OPENSUSE-SU-2022_0363-1

OPENSUSE-SU-2022_0366-1

OPENSUSE-SU-2022_0370-1

OPENSUSE-SU-2024:11796-1

OPENSUSE-SU-2024:13704-1

RHSA-2022:0592

RHSA-2022:0620

RHSA-2022:0622

RHSA-2022:0712

RHSA-2022:0718

RHSA-2022:0771

RHSA-2022:0772

RHSA-2022:0777

RHSA-2022:0819

RHSA-2022:0820

RHSA-2022:0821

RHSA-2022:0823

RHSA-2022:0825

RHSA-2022:0841

RHSA-2022:0849

RHSA-2022:0851

RHSA-2022:0925

RHSA-2022:0958

RHSA-2022:1103

RHSA-2022:1104

RHSA-2022:1106

RHSA-2022:1107

RHSA-2022:1263

RHSA-2022_0620

RHSA-2022_0622

RHSA-2022_0819

RHSA-2022_0825

RLSA-2022:0819

RLSA-2022:0825

SUSE-SU-2022:0362-1

SUSE-SU-2022:0363-1

SUSE-SU-2022:0364-1

SUSE-SU-2022:0365-1

SUSE-SU-2022:0366-1

SUSE-SU-2022:0367-1

SUSE-SU-2022:0370-1

SUSE-SU-2022:0371-1

SUSE-SU-2022:0372-1

SUSE-SU-2022:0477-1

SUSE-SU-2022:0543-1

SUSE-SU-2022:0544-1

SUSE-SU-2022:0555-1

SUSE-SU-2022:1569-1

SUSE-SU-2022:1575-1

SUSE-SU-2022:1580-1

SUSE-SU-2022:1589-1

SUSE-SU-2022:1591-1

SUSE-SU-2022:1605-1

SUSE-SU-2022:1637-1

SUSE-SU-2022:1640-1

SUSE-SU-2022_1569-1

SUSE-SU-2022_1575-1

SUSE-SU-2022_1589-1

SUSE-SU-2022_1591-1

SUSE-SU-2022_1605-1

SUSE-SU-2022_1637-1

SUSE-SU-2022_1640-1

USN-5278-1

USN-5294-1

USN-5294-2

USN-5295-1

USN-5295-2

USN-5297-1

USN-5298-1

USN-5362-1

USN-5505-1

USN-5513-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 639

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb · Exploit
• 🔥 https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit · Exploit
• 🔥 https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/imfiver/CVE-2022-0847 · Exploit