A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 10, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfo | Jul 4, 2022 | Mar 10, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 10, 2022 | Mar 7, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Mar 7, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 10, 2022 |
| Debian | — | Upgrade linux | Mar 9, 2022 | Mar 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 2, 2022 | Mar 10, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 11, 2022 | Mar 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 10, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-cross-headers | May 5, 2022 | Mar 10, 2022 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanillaUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-preemptUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kselftests-kmp-preemptUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-alUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-azure-develUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-baseUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-azure | Mar 9, 2022 | Mar 7, 2022 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-35-genericUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1019-gcp | Mar 9, 2022 | Mar 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub