高危
Linux kernel本地权限提升漏洞(DirtyPipe)
2022-03-07 00:00:00 公开 ，2025-10-22 00:25:10 更新
- 关键漏洞
- CISA KEV
- APT漏洞
- 本地
- 公开PoC
- 开源组件漏洞
- CWEs：
- CWE-665 （Improper Initialization）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2025-02-05 02:38:16
风险信息
- CVSS v2 向量
- AV:L/AC:L/Au:N/C:C/I:C/A:C
- CVSS v2 风险值
- 7.2
- CVSS v3 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 7.8
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。Linux内核可能允许经过本地身份验证的攻击者在系统上获得提升的权限，这是由于copy_page_to_iter_pipe和push_pipe函数中的不正确初始化引起的。通过写入由只读文件支持的页面缓存中的页面，经过身份验证的攻击者可以利用此漏洞获得提升的权限。此漏洞类似于CVE-2016-5195（脏牛），但更容易被利用。
- 修复建议
- 从Linux内核网站升级至最新版本的Linux内核（5.10.102、5.15.25、5.16.11或更高版本）： https://kernel.org/
参考链接
- https://www.exploit-db.com/exploits/50808
- https://vigilance.fr/vulnerability/Linux-kernel-file-write-via-Dirty-Pipe-37724
- https://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
NVD · VDB Entry · Third Party Advisory · Exploit
- https://cxsecurity.com/issue/WLB-2022030042
- https://www.cybersecurity-help.cz/vdb/SB2022030808
- https://access.redhat.com/security/cve/cve-2022-0847
- https://www.auscert.org.au/bulletins/ESB-2022.0944
- https://www.auscert.org.au/bulletins/ESB-2022.0965
- http://packetstormsecurity.com/files/166230/Dirty-Pipe-SUID-Binary-Hijack-Privilege-Escalation.html
NVD · x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=2060795
OSV · x_refsource_MISC
- https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf
NVD · x_refsource_CONFIRM
- https://security.netapp.com/advisory/ntap-20220325-0005/
NVD · x_refsource_CONFIRM
- https://www.suse.com/support/kb/doc/?id=000020603
NVD · x_refsource_MISC
- http://packetstormsecurity.com/files/166258/Dirty-Pipe-Local-Privilege-Escalation.html
NVD · x_refsource_MISC
- http://packetstormsecurity.com/files/166229/Dirty-Pipe-Linux-Privilege-Escalation.html
NVD · x_refsource_MISC
- https://dirtypipe.cm4all.com/
NVD · x_refsource_MISC
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0015
NVD · x_refsource_CONFIRM
- http://packetstormsecurity.com/files/176534/Linux-4.20-KTLS-Read-Only-Write.html
NVD · VDB Entry · Third Party Advisory
- https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2022/2022-05.md
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-167-09
- https://source.android.com/security/bulletin/2022-05-01
OSV
- https://android.googlesource.com/kernel/common/+/b9b8fd203dba3
OSV
- https://android.googlesource.com/kernel/common/+/b19ec7afa9297
OSV
- https://android.googlesource.com/kernel/common/+/aa3e9c7480830f38390a61501386be4a03efb88d
OSV
- https://osv.dev/vulnerability/ASB-A-220741611
OSV
- https://vulners.com/cve/CVE-2021-0920
OSV
- https://vulners.com/cve/CVE-2021-4154
OSV
- https://vulners.com/cve/CVE-2022-0330
OSV
- https://vulners.com/cve/CVE-2022-0435
OSV
- https://vulners.com/cve/CVE-2022-0492
OSV
- https://vulners.com/cve/CVE-2022-0516
OSV
- https://vulners.com/cve/CVE-2022-0847
OSV
- https://vulners.com/cve/CVE-2022-22942
OSV
- https://osv.dev/vulnerability/ALSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0825
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2031930
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2034514
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2042404
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2044809
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2048738
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2050237
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2051505
OSV
- https://osv.dev/vulnerability/RLSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/DSA-5092-1
OSV
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202206-0000001270030618
HarmonyOS
- https://ubuntu.com/security/CVE-2022-0847
OSV
- https://www.openwall.com/lists/oss-security/2022/03/07/1
OSV
- https://ubuntu.com/security/notices/USN-5317-1
OSV
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/DirtyPipe
OSV
- https://ubuntu.com/security/notices/USN-5362-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2022-0847
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2022-0847
OSV
- https://security-tracker.debian.org/tracker/CVE-2022-0847
OSV
- https://osv.dev/vulnerability/CVE-2022-0847
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2022-0847
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0847
NVD · US Government Resource