CVE-2022-0847

kernel

Published 10 Mar 2022 · updated 17 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 25 Apr 2022, with a remediation deadline of 16 May 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

References

packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html · Exploit, Third Party Advisory, VDB Entry
packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html · Exploit, Third Party Advisory, VDB Entry
packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html · Exploit, Third Party Advisory, VDB Entry
packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html · Third Party Advisory, VDB Entry
bugzilla.redhat.com/show_bug.cgi?id=2060795 · Issue Tracking, Patch, Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf · Third Party Advisory
dirtypipe.cm4all.com/ · Exploit, Third Party Advisory
psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015 · Third Party Advisory
security.netapp.com/advisory/ntap-20220325-0005/ · Third Party Advisory
www.suse.com/support/kb/doc/?id=000020603 · Third Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0847 · US Government Resource