CVE-2022-0847

CVE-2022-0847 설명 - CVE-2022-0847에 대한 PoC: Linux 커널 로컬 권한 상승 취약점. 상세 - 보안 연구원 Max Kellermann이 'Dirty Pipe' 취약점을 책임감 있게 공개했으며, 이 취약점이 Linux 커널 5.8 이상 버전과 Android 기기에도 영향을 미친다고 밝혔습니다. - Linux 커널 5.8부터 존재하는 취약점으로, 임의의 읽기 전용 파일의 데이터를 덮어쓸 수 있습니다. 이로 인해 권한이 없는 프로세스가 루트 프로세스에 코드를 주입할 수 있어 권한 상승으로 이어집니다...

kernel: improper initialization of the "flags" member of the new pipe_buffer

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...

kernel: improper initialization of the "flags" member of the new pipe_buffer

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...

Debian: Security Advisory (DSA-5092-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...