A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

🗓️ 11 Mar 2022 08:00:00Reported by MicrosoftType

Linux kernel pipe flag init flaw lets unprivileged users modify read only page cache pages and escalate privileges.

Reporter	Title	Published	Views	Family All 467
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	7 Jan 202500:25	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	25 Mar 202522:16	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	10 Mar 202201:27	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	12 Mar 202211:31	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	8 Mar 202212:43	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	7 Feb 202611:15	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	8 Mar 202201:17	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	18 Mar 202222:51	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	22 Mar 202203:17	–	githubexploit
GithubExploit	Exploit for Improper Initialization in Linux Linux_Kernel	4 Jun 202413:25	–	githubexploit

Vulners

Node

11 Mar 2022 08:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

EPSS0.81981

SSVC