5 votes

The Dirty Pipe Vulnerability

Posted by qwertz
Tags: linux, kernel, vulnerability, privilege escalation, gcc, clang
https://dirtypipe.cm4all.com/

Link information

This data is scraped automatically and may be incorrect.

Title
The Dirty Pipe Vulnerability - The Dirty Pipe Vulnerability documentation
Word count
2665 words

1 comment

  1. qwertz
    Link
    Everyone always thinks it's a kernel bug, it's a gcc/clang bug, etc. so it's fun to hear about when it actually was.

    This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes.

    Everyone always thinks it's a kernel bug, it's a gcc/clang bug, etc. so it's fun to hear about when it actually was.

    3 votes