PT-2022-6725 · Linux+6 · Linux Kernel+6

Lucas Leong + 1 · Published 2022-09-05 · Updated 2025-01-24 · CVE-2023-2860

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to an out-of-bounds read vulnerability in the SR-IPv6 implementation in the Linux kernel, specifically within the processing of seg6 attributes. This flaw results from the improper validation of user-supplied data, allowing a read past the end of an allocated buffer. A privileged local user can exploit this to disclose sensitive information on affected installations of the Linux kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2023-4894

AZL-27797

BDU:2023-03728

CVE-2023-2860

OESA-2023-1393

OESA-2023-1394

OESA-2023-1397

OESA-2023-1539

OPENSUSE-SU-2023_4343-1

OPENSUSE-SU-2023_4414-1

OPENSUSE-SU-2024_1642-1

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

OPENSUSE-SU-2024_2189-1

SUSE-SU-2023:4343-1

SUSE-SU-2023:4414-1

SUSE-SU-2024:1642-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1650-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:2189-1

SUSE-SU-2025:0231-1

USN-6247-1

ZDI-23-692

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 1346

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit
• 🔥 https://github.com/pqlx/CVE-2022-1015 · Exploit