Linux Kernel privilege escalation vulnerability warning

2023-03-31
 

Respectful master's command:

Hello! Recently, it was revealed that the Linux Kernel has a local privilege escalation vulnerability, with the vulnerability number CVE-2022-0847. It can cause harm such as local Linux privilege escalation.

[Vulnerability Rating]

High risk

[Vulnerability description]

CVE-2022-0847

By exploiting this vulnerability, an attacker can overwrite data in any readable file, thereby elevating a user with normal permissions to root permissions. At present, POC and EXP have been made public, and the risk is high.

[scope of influence]

The cloud services provided by Theme Cloud are not affected by vulnerabilities. Please promptly arrange for self-inspection of the internally built environment and perform security reinforcements.

Affected versions:

5.8 <= Linux kernel < 5.16.11 / 5.15.25 / 5.10.102

[Repair Plan]

Currently, Kernel has officially provided a safe version to fix this vulnerability. Affected users are requested to upgrade to the safe version in time: https://www.kernel.org/

[Reference link]

https://access.redhat.com/security/cve/cve-2022-0847

https://dirtypipe.cm4all.com/

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d2231c5d74e13b2a0546fee6737ee4446017903

Back to List
The world’s best cloud service provider
Friendly links

© Copyright 2019. SCCK SERVER LTD