CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
95.4%
A flaw was found in the way the “flags” member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Recent assessments:
Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0
packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html
packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
bugzilla.redhat.com/show_bug.cgi?id=2060795
cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0847
dirtypipe.cm4all.com/
github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github.com/DataDog/dirtypipe-container-breakout-poc
psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
security.netapp.com/advisory/ntap-20220325-0005/
www.suse.com/support/kb/doc/?id=000020603
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
95.4%