7.8
High
Exploited
CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-665
Description
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- dirtypipe.cm4all.com dirtypipe.cm4all.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- www.suse.com www.suse.com
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- psirt.global.sonicwall.com psirt.global.sonicwall.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of kernel
The 279 CVEs of kernel →
CVE-2024-1312
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…
5.1
Medium
CVE-2023-6200
A race condition was found in the Linux Kernel
7.5
High
CVE-2023-6560
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel
5.5
Medium
CVE-2023-5972
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel
7.0
High