CVE 2022 0847 (Dirty Pipe) | Privilege escalation | Linux Kernel 5.8

Max Kellermann, a security researcher, responsibly disclosed the 'Dirty Pipe' vulnerability, stating that it affects Linux Kernel 5.8 and later versions, as well as Android devices.
The CVE-2022-0847 vulnerability allows a non-privileged user to inject and overwrite data in read-only files, including SUID processes that run as root.
Kellerman discovered the bug while investigating a bug that was corrupting one of his customers' web server access logs. According to Kellerman, the vulnerability is similar to the Dirty COW vulnerability (CVE-2016-5195) that was fixed in 2016.

the vulnerability Allows an overwrite of any file regardless of permissions, including immutable or read-only mounts, by splicing data into a pipe. This affects Linux 5.8+ and can lead to privilege escalation.

The Dirty Pipe vulnerability, which is been tracked as CVE-2022-0847 is somehow similar to the popular bug in Linux called "Dirty Cow" but is easier to exploit.

Credit: Max Kellerman

Reference:
[ Ссылка ]
[ Ссылка ]
[ Ссылка ]

свернуть