Dirty Pipe (CVE-2022-0847)
Linux Kernel Privilege Escalation Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2022-0847
Also Known as Dirty Pipe
Max Kellermann disclosed Dirty Pipe in March 2022 as a Linux kernel flaw, present since version 5.8, that allows overwriting data in read-only files. Unprivileged processes can use it to inject code into root processes.
Description
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Severity
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitation Context
as of October 17, 2026- CISA added CVE-2022-0847 to the KEV catalog 49 days after its CVE record was published.
- It is one of 31 Linux Kernel entries in the CISA KEV catalog, and one of 8 added in 2022.
- Its current EPSS score (92.8%) is higher than that of 75% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| - | kernel | Linux Kernel 5.17 rc6 |
References
10 Links- https://bugzilla.redhat.com/show_bug.cgi?id=2060795
- https://dirtypipe.cm4all.com/
- http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html
- http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
- http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
- https://www.suse.com/support/kb/doc/?id=000020603
- https://security.netapp.com/advisory/ntap-20220325-0005/
- https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
- http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
Record Details
More from Linux Kernel
Linux Kernel Race Condition Vulnerability
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
Linux Kernel Improper Privilege Management Vulnerability
Linux Kernel Privilege Escalation Vulnerability
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.