CVE-2022-0847

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.16.10 Linux kernel versions 5.15 through 5.15.24 Linux kernel versions 5.10 through 5.10.101

Description An issue exists in the Linux kernel where the flags member of the new pipe buffer structure is not properly initialized within the copy page to iter pipe() and push pipe() functions. This lack of initialization can lead to the presence of stale values, allowing an unprivileged local user to overwrite data in the page cache of arbitrary read-only files. This flaw can be exploited to escalate privileges, modify sensitive files such as /etc/passwd, inject code from unprivileged processes into privileged ones, or create unauthorized root-level access, such as adding SSH keys to the root account. The issue also affects Android devices utilizing the vulnerable kernel versions, where it can be leveraged by malicious applications to gain elevated permissions.

Recommendations Update Linux kernel to version 5.16.11 or newer. Update Linux kernel to version 5.15.25 or newer. Update Linux kernel to version 5.10.102 or newer.