CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-0847

Weakness behind it

CISA records this vulnerability as an instance of CWE-665. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-0847
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog