CVE-2022-0847 — Linux Kernel Privilege Escalation Vulnerability
CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Linux |
| Product | Kernel |
| Date added | 2022-04-25 |
| Due date | 2022-05-16 |
| Ransomware campaign use | Unknown |
Description
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-0847
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-0847
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog