A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools | Jul 4, 2022 | Mar 10, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Feb 17, 2025 | Mar 7, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade linux | Mar 9, 2022 | Mar 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jun 2, 2022 | Mar 10, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 11, 2022 | Mar 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-cross-headersUpgrade python3-perfUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-tools | May 5, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-preemptUpgrade dtb-freescaleUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-zfcpdump-manUpgrade kernel-vanillaUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-vanilla-livepatch-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade dtb-armUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade dlm-kmp-preemptUpgrade dtb-alUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-baseUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-preempt-extraUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-altera | Mar 9, 2022 | Mar 7, 2022 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-generic-hwe-20.04 | Mar 9, 2022 | Mar 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub