CVE-2022-0847

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local en el kernel de Linux. - creado por antx el 2022-03-08. Detalle - El investigador de seguridad Max Kellermann reveló responsablemente la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al kernel...

DirtyPipe-Exploit

CSE 5380: Trabajo de Seguridad de la Información CVE-2022-0847 Dirty Pipe Por Karan Vasudevamurthy UTA ID: 1002164438 ¿Qué es CVE? Common Vulnerabilities and Exposures CVE es una lista de vulnerabilidades y exposiciones de seguridad de la información divulgadas públicamente. La corporación MITRE...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits This repository offers a comprehensive collection of exploits and documentation specifically designed for penetration testers and red team professionals. It serves as a valuable resource for those aiming to exploit the Linux Dirty Pipe vulnerability effectively...

CVE-2022-0847-L-nux-PrivEsc

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local en el kernel de Linux. - Creado por antx el 2022-03-08. Detalle - El investigador de seguridad Max Kellermann reveló de manera responsable la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Resumen Este repositorio contiene una Prueba de Concepto PoC del exploit para la vulnerabilidad Dirty Pipe CVE-2022-0847 , que afecta a las versiones del kernel de Linux 5.8 a 5.16. Esta vulnerabilidad permite la escalada de privilegios locales al explotar el mane...

CVE-2022-0847-Linux

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local en el kernel de Linux. - creado por antx el 2022-03-08. Detalle - El investigador de seguridad Max Kellermann reveló responsablemente la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al kernel...

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF Un programa eBPF para detectar y defender ataques en CVE-2022-0847. En el espacio del kernel, el programa detecta las llamadas al sistema splice ; si dicha llamada contiene un pipe como fd de salida y los flags del buffer del pipe están establecidos en PIPEBUFFLAGCANMERGE ,...

cve-2022-0847dirtypipe-exploit

cve-2022-0847dirtypipe-exploit...

CVE-2022-0847

CVE-2022-0847 Descripción - POC para CVE-2022-0847: Vulnerabilidad de escalada de privilegios local del kernel de Linux. Detalle - El investigador de seguridad Max Kellermann divulgó de manera responsable la vulnerabilidad 'Dirty Pipe' y afirmó que afecta al kernel de Linux 5.8 y versiones...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...

CVE-2022-0847-DirtyPipe

title: Análisis de la vulnerabilidad CVE-2022-0847 escalada local de privilegios DirtyPipe date: 2022-03-08 14:41:20 tags: - Escalada de privilegios en Linux categories: - Investigación de seguridad Descripción de la vulnerabilidad ​ CVE-2022-0847 es una vulnerabilidad en el kernel de Linux desde...

Astra Linux – Vulnerability in Linux 5.10

A flaw was discovered in the way the “flags” member of the new pipe buffer structure lacked proper initialization in the copypagetoiterpipe and pushpipe functions of the Linux kernel. As a result, these members could contain stale values. An unprivileged local user could exploit this flaw to writ...

CVE-2026-80982

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smcrxpipebufrelease smcrxsplice hands RMB pages to a pipe and takes a socket reference per entry so the smcsock stays alive until the reader finishes. The connection does not: a concurrent close run...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099754 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocat...

net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer

...

SUSE CVE-2026-31507

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocates one smcspdpriv per pipebuffer and stores the pointer in pipebuffer.private. The pipebufoperations for these buffers used .get =...

EUVD-2026-24885

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocates one smcspdpriv per pipebuffer and stores the pointer in pipebuffer.private. The pipebufoperations for these buffers used .get =...

CVE-2026-31507 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocates one smcspdpriv per pipebuffer and stores the pointer in pipebuffer.private. The pipebufoperations for these buffers used .get =...

CVE-2026-31507 net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smcspdpriv when tee duplicates splice pipe buffer smcrxsplice allocates one smcspdpriv per pipebuffer and stores the pointer in pipebuffer.private. The pipebufoperations for these buffers used .get =...

CVE-2026-31507

CVE-2026-31507 affects the Linux kernel SMC module (net/smc). The vulnerability is a double-free of the per-buffer state (smc_spd_priv) when tee(2) duplicates a splice pipe buffer, leading to a use-after-free and a kernel NULL pointer dereference, ultimately causing a kernel panic. The root cause...