CVE-2022-0847

KEV
Published: Mar 10, 2022 Last Modified: Nov 06, 2025
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,2
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

A flaw was found in the way the 'flags' member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,8414
Percentile
1,0th
Updated

EPSS Score Trend (Last 91 Days)

665

Improper Initialization

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Access Control Availability
Potential Impacts:
Read Memory Read Application Data Bypass Protection Mechanism Dos: Crash, Exit, Or Restart
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Medium
View CWE Details
Exploit

Linux Kernel 5.8 < 5.16.11 - Local Privilege …

Linux Kernel 5.8 < 5.16.11 - Local Privilege Escalation (DirtyPipe)

Author: Lance Biggerstaff Published:
View Exploit Code →
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.16 (inclusive)
To 5.16.11 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H700E Firmware by Netapp

Product Information
Vendor Netapp
Product H700E Firmware
Version -
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H300E Firmware by Netapp

Product Information
Vendor Netapp
Product H300E Firmware
Version -
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Codeready Linux Builder by Redhat

Product Information
Vendor Redhat
Product Codeready Linux Builder
Version -
cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.8 (inclusive)
To 5.10.102 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H410C Firmware by Netapp

Product Information
Vendor Netapp
Product H410C Firmware
Version -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H500E Firmware by Netapp

Product Information
Vendor Netapp
Product H500E Firmware
Version -
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Update Services For Sap Solutions
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian
Version 8.0
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Update Services For Sap Solutions
Version 8.1
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 8.1
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H700S Firmware by Netapp

Product Information
Vendor Netapp
Product H700S Firmware
Version -
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H300S Firmware by Netapp

Product Information
Vendor Netapp
Product H300S Firmware
Version -
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time For Nfv Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time For Nfv Tus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Sma1000 Firmware by Sonicwall

Product Information
Vendor Sonicwall
Product Sma1000 Firmware
Version Range Affected
To 12.4.2-02044 (inclusive)
cpe:2.3:o:sonicwall:sma1000_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H500S Firmware by Netapp

Product Information
Vendor Netapp
Product H500S Firmware
Version -
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Eus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems
Version 8.0
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Ibm Z Systems Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Ibm Z Systems Eus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Scalance Lpe9403 Firmware by Siemens

Product Information
Vendor Siemens
Product Scalance Lpe9403 Firmware
Version Range Affected
To 2.0 (exclusive)
cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Tus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.15 (inclusive)
To 5.15.25 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time For Nfv Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time For Nfv Tus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time Tus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Virtualization Host by Redhat

Product Information
Vendor Redhat
Product Virtualization Host
Version 4.0
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Update Services For Sap Solutions by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Update Services For Sap Solutions
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time Tus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time Tus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Ovirt-Engine by Ovirt

Product Information
Vendor Ovirt
Product Ovirt-Engine
Version 4.4.10.2
cpe:2.3:a:ovirt:ovirt-engine:4.4.10.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time
Version 8
cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H410S Firmware by Netapp

Product Information
Vendor Netapp
Product H410S Firmware
Version -
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux Server Aus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux Server Aus
Version 8.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Power Little Endian Eus by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Power Little Endian Eus
Version 8.2
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux For Real Time For Nfv by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux For Real Time For Nfv
Version 8
cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux
Version 8.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022…
http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linu…
http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalati…
http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID…
http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privi…
http://packetstormsecurity.com/files/166258/Dirty-Pipe-Loca…
http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalati…
http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS…
http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
https://bugzilla.redhat.com/show_bug.cgi?id=2060795
https://bugzilla.redhat.com/show_bug.cgi?id=2060795
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.…
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
https://dirtypipe.cm4all.com/
https://dirtypipe.cm4all.com/
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-…
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
https://security.netapp.com/advisory/ntap-20220325-0005/
https://security.netapp.com/advisory/ntap-20220325-0005/
https://www.suse.com/support/kb/doc/?id=000020603
https://www.suse.com/support/kb/doc/?id=000020603
http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linu…
http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalati…
http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID…
http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privi…
http://packetstormsecurity.com/files/166258/Dirty-Pipe-Loca…
http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalati…
http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS…
http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
https://bugzilla.redhat.com/show_bug.cgi?id=2060795
https://bugzilla.redhat.com/show_bug.cgi?id=2060795
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.…
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
https://dirtypipe.cm4all.com/
https://dirtypipe.cm4all.com/
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-…
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
https://security.netapp.com/advisory/ntap-20220325-0005/
https://security.netapp.com/advisory/ntap-20220325-0005/
https://www.suse.com/support/kb/doc/?id=000020603
https://www.suse.com/support/kb/doc/?id=000020603