CVE-2022-0847

Name
CVE-2022-0847
Description
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2060795
Exploit https://dirtypipe.cm4all.com/
Exploit http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
Exploit http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html
Exploit http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
Third Party Advisory https://www.suse.com/support/kb/doc/?id=000020603
Third Party Advisory https://security.netapp.com/advisory/ntap-20220325-0005/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 5.8 < 5.10.102
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 5.15 < 5.15.25
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= 5.16 < 5.16.11

Vulnerable and fixed packages

Source package Branch Version Maintainer Status