A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel | Jul 4, 2022 | Mar 10, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf | Feb 17, 2025 | Mar 7, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade linux | Mar 9, 2022 | Mar 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jun 2, 2022 | Mar 10, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 11, 2022 | Mar 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-devel | May 5, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dlm-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-zteUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade dtb-amlogicUpgrade kernel-preempt-extraUpgrade dtb-nvidiaUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-debug-baseUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alUpgrade dtb-exynosUpgrade kernel-vanilla-baseUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-vanillaUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade ocfs2-kmp-preemptUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-obs-qa | Mar 9, 2022 | Mar 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-awsUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1017-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-20.04d | Mar 9, 2022 | Mar 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub