Linux · Kernel
CVE-2022-0847
Linux Kernel Privilege Escalation Vulnerability
O que é
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CISA: Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 16 de maio de 2022
- Adicionada à lista da CISA
- 25 de abril de 2022
- Publicada
- 7 de março de 2022
- Gravidade
- Alto 7,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 93% entre os 0,2% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-665
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (10)
- https://bugzilla.redhat.com/show_bug.cgi?id=2060795
- https://dirtypipe.cm4all.com/
- http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html
- http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
- http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
- https://www.suse.com/support/kb/doc/?id=000020603
- https://security.netapp.com/advisory/ntap-20220325-0005/
- https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
- http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
Mais falhas exploradas de Linux
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 18 de set. de 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Crítica 9,8 | 3,3% |
| 18 de set. de 2026 | Race Condition | Kernel | Alto 7,8 | 1,6% |
| 18 de set. de 2026 | Out-of-Bounds Write | Kernel | Alto 8,8 | 0,9% |
| 27 de ago. de 2026 | Unspecified | Kernel | Alto 7,8 | 0,7% |
| 26 de ago. de 2026 | Out-of-Bounds Write | Kernel | Alto 7,8 | 8,9% |
| 2 de jun. de 2026 | Improper Authentication | Kernel | Alto 7,8 | 5,5% |
| 1 de mai. de 2026 | Incorrect Resource Transfer Between Spheres | Kernel | Alto 7,8 | 98% |
| 26 de jan. de 2026 | Integer Overflow | Kernel | Alto 7,8 | 15% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.