PT-2022-6142 · Linux+3 · Linux Kernel+3

Published 2022-09-29 · Updated 2025-04-08 · CVE-2022-4842

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw in the Linux kernel NTFS3 driver function attr punch hole() was found, related to a NULL Pointer Dereference. This issue could allow a local user to crash the system, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2023-00160

CVE-2022-4842

MGASA-2023-0087

MGASA-2023-0088

OESA-2023-1038

OESA-2023-1039

USN-5978-1

USN-6025-1

USN-6040-1

USN-6057-1

USN-6079-1

USN-6091-1

USN-6096-1

USN-6134-1

USN-6206-1

USN-6235-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 112

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/chenaotian/CVE-2023-0386 · Exploit
• 🔥 https://github.com/lanleft/CVE-2023-1829 · Exploit
• 🔥 https://github.com/sxlmnwb/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Fanxiaoyao66/CVE-2023-0386 · Exploit
• 🔥 https://github.com/veritas501/CVE-2023-0386 · Exploit
• 🔥 https://github.com/CKevens/CVE-2023-0386 · Exploit
• 🔥 https://github.com/3yujw7njai/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Satheesh575555/linux-4.19.72_CVE-2023-0386 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1078 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6040-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6096-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1281 · Vendor Advisory