A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headers | Jul 4, 2022 | Mar 10, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 17, 2025 | Mar 7, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade linux | Mar 9, 2022 | Mar 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 2, 2022 | Mar 10, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 11, 2022 | Mar 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules | May 5, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-64kbUpgrade kernel-vanilla-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-zfcpdump-manUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-preempt-develUpgrade reiserfs-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-azureUpgrade dtb-zteUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-preempt-extraUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-default | Mar 9, 2022 | Mar 7, 2022 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.13.0-1010-intel | Mar 9, 2022 | Mar 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub