A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfoUpgrade kernel-headers | Jul 4, 2022 | Mar 10, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade perfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfo | Feb 17, 2025 | Mar 7, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade linux | Mar 9, 2022 | Mar 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 2, 2022 | Mar 10, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 11, 2022 | Mar 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade python3-perf | May 5, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-alUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade dtb-qcomUpgrade dlm-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-preemptUpgrade kernel-default-extraUpgrade dtb-alteraUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-preempt-extraUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-vanillaUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-vanilla-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade cluster-md-kmp-preempt | Mar 9, 2022 | Mar 7, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-35-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae | Mar 9, 2022 | Mar 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub