CVE-2022-0847 is a high-severity vulnerability affecting various Linux-based systems, including specific configurations of Red Hat Enterprise Linux, Fedora, NetApp storage systems, Siemens Scalance LPE9403, SonicWall SMA1000, and oVirt virtualization platforms. This flaw, present in certain functions of the Linux kernel, allows an unprivileged local user to write to pages in the page cache backed by read-only files, potentially escalating their privileges on the system.

How do I know if I'm affected?

If you're wondering whether your system is affected by the vulnerability, you should check your Linux kernel version. Systems with kernel versions between 5.8 and 5.16.10 are vulnerable. This flaw, also known as Dirty Pipe, can lead to privilege escalation for unprivileged local users. Keep in mind that this vulnerability affects various Linux-based systems, but the specific Apple product versions impacted are not mentioned in the provided sources.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to update your Linux kernel to a fixed version (5.16.11, 5.15.25, or 5.10.102). This will help prevent unprivileged local users from exploiting the flaw and escalating their privileges on your system. Make sure to keep your system updated and stay informed about security advisories to protect against future vulnerabilities.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Linux Kernel Privilege Escalation Vulnerability, was added on April 25, 2022, with a due date of May 16, 2022. The required action is to apply updates per vendor instructions to address this vulnerability, which could allow unprivileged processes to overwrite data in read-only files and potentially escalate privileges on affected systems.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-665, which is related to Improper Initialization, affects Linux kernel versions and can lead to privilege escalation. Remediation involves updating to fixed kernel versions and applying patches.

For more details

CVE-2022-0847, a high-severity vulnerability affecting various Linux-based systems, requires prompt attention and remediation to prevent potential privilege escalation. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Dirty Pipe Linux Privilege Escalation

• Dirty Pipe Local Privilege Escalation (1)

• Dirty Pipe SUID Binary Hijack Privilege Escalation (2)

• CVE-2022-0847 Linux Kernel Vulnerability in NetApp Products