7.8
Élevée
Exploitée
CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-665
Description
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kernel | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- dirtypipe.cm4all.com dirtypipe.cm4all.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- www.suse.com www.suse.com
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- psirt.global.sonicwall.com psirt.global.sonicwall.com
- packetstormsecurity.com packetstormsecurity.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de kernel
Les 279 CVE de kernel →
CVE-2024-1312
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…
5.1
Moyenne
CVE-2023-6200
A race condition was found in the Linux Kernel
7.5
Élevée
CVE-2023-6560
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel
5.5
Moyenne
CVE-2023-5972
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel
7.0
Élevée