Linux Kernel privilege escalation vulnerability warning
Respectful master's command:
Hello! Recently, it was revealed that the Linux Kernel has a local privilege escalation vulnerability, with the vulnerability number CVE-2022-0847. It can cause harm such as local Linux privilege escalation.
[Vulnerability Rating]
High risk
[Vulnerability description]
CVE-2022-0847
By exploiting this vulnerability, an attacker can overwrite data in any readable file, thereby elevating a user with normal permissions to root permissions. At present, POC and EXP have been made public, and the risk is high.
[scope of influence]
The cloud services provided by Theme Cloud are not affected by vulnerabilities. Please promptly arrange for self-inspection of the internally built environment and perform security reinforcements.
Affected versions:
5.8 <= Linux kernel < 5.16.11 / 5.15.25 / 5.10.102
[Repair Plan]
Currently, Kernel has officially provided a safe version to fix this vulnerability. Affected users are requested to upgrade to the safe version in time: https://www.kernel.org/
[Reference link]
https://access.redhat.com/security/cve/cve-2022-0847
https://dirtypipe.cm4all.com/
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d2231c5d74e13b2a0546fee6737ee4446017903
