CVE-2022-0847

Scores

EPSS

0.816high81.6%
0%20%40%60%80%100%

Percentile: 81.6%

CVSS

7.8high3.x
0246810

CVSS Score: 7.8/10

All CVSS Scores

CVSS 3.x
7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0
7.2

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

A flaw was found in the way the “flags” member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

astradebiannvdredhatubuntu

CWEs

CWE-281CWE-665

Related Vulnerabilities

Exploits

Exploit ID: CVE-2022-0847

Source: cisa

URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Exploit ID: 50808

Source: exploitdb

URL: https://www.exploit-db.com/exploits/50808

Vulnerable Software (254)

Type: Configuration

Product: kernel

Operating System: rhel 8

Trait:
{  "fixed": "4.18.0-348.20.1.el8_5"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 8.1

Trait:
{  "fixed": "4.18.0-147.64.1.el8_1"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 8.2

Trait:
{  "fixed": "4.18.0-193.79.1.el8_2"}

Source: redhat

Type: Configuration

Product: kernel

Operating System: rhel 8.4

Trait:
{  "fixed": "4.18.0-305.40.2.el8_4"}

Source: redhat

Type: Configuration

Product: kernel-rt

Operating System: rhel

Trait:
{  "fixed": "4.18.0-348.20.1.rt7.150.el8_5"}

Source: redhat

Type: Configuration

Product: kernel-rt

Operating System: rhel

Trait:
{  "fixed": "4.18.0-193.79.1.rt13.129.el8_2"}

Source: redhat

Type: Configuration

Product: kernel-rt

Operating System: rhel

Trait:
{  "fixed": "4.18.0-305.40.2.rt7.113.el8_4"}

Source: redhat

Type: Configuration

Product: linux

Operating System: debian

Trait:
{  "fixed": "5.16.11-1"}

Source: debian

Type: Configuration

Product: linux

Operating System: debian buster 10

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: linux

Operating System: debian stretch 9

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: linux

Operating System: ubuntu bionic 18.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu focal 20.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu impish 21.10

Trait:
{  "fixed": "5.13.0-35.40"}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu jammy 22.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu kinetic 22.10

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu lunar 23.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu mantic 23.10

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux

Operating System: ubuntu noble 24.04

Trait:
{  "unaffected": true}

Source: ubuntu

Type: Configuration

Product: linux-5.10

Operating System: astra 1.7.2.5

Trait:
{  "unaffected": true}

Source: astra

Type: Configuration

Product: linux-5.10

Operating System: astra 4.7.2.5

Trait:
{  "unaffected": true}

Source: astra