In CISA KEV7.8 HighCWE-665
CVE-2022-0847
Linux Kernel Privilege Escalation Vulnerability
LinuxKernel
Status
- Exploited in the wild
- In CISA KEV since 25 Apr 2022
- Vendor fix available
Federal deadlineMon 16 May 2022, 23:59 UTC
Passed 1622 days ago
CISA KEV · added 25 Apr 2022
Exploit probabilityEPSSchecked 24 Oct
93%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
7.8High
Description NVD
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- Office and Windows flaws boost exploit kits in Q1 2026Securelist · first in our coverage · mentions it in passing