A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Connections 44
has cited scope1 retained · stored CVE-2022-0847 → n/a · kernel569fb0d2-ce1b-4ae9-a79c-98adef7c7c82
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h700ec1267ce7-214f-464f-b33d-1d1d08eaac0e
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h410c9a9f031a-4b02-40f2-9426-5bcd4aea7f36
has environmental constraint2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_power_little_endian_eus091bc967-b54b-4eab-a9af-2f79da47b4979b35bb53-7cf3-4873-830a-b3f350d8c536
has environmental constraint1 retained · stored CVE-2022-0847 → siemens · scalance_lpe9403b5513978-7d3c-4e7f-93a3-ecda0d009996
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h500sdcad2963-5a3e-4468-97ce-b05df778fbe3
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h300s8edc2b2f-c6ae-4929-a0c7-b0409c4cf5fb
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h300ed649de0b-670d-4bf7-9641-e9b70d7e3c06
has environmental constraint2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_eus9e4e62ab-adec-4eff-8f2a-fd0e1db357d8f1372f80-279f-43bf-9755-1bc1f2012f09
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h410sba8deba1-2e85-4ea1-867b-9907d3e9c9e8
has environmental constraint1 retained · stored CVE-2022-0847 → sonicwall · sma100079f14165-cebe-4494-8f6b-204eec18820f
has environmental constraint1 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_power_little_endianc43d16e5-3fab-4a7c-8fd6-5c9e2b7e61f4
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h500ea51c57a6-cc9d-40bb-98d6-a03892f84905
has environmental constraint2 retained · stored CVE-2022-0847 → redhat · enterprise_linux789fe8bc-8ba0-4580-89b2-aa340e217a22a58eec05-8601-4be9-9423-1d19a56c8e24
has environmental constraint1 retained · stored CVE-2022-0847 → netapp · h700s94cd4192-fd4b-43ae-92bb-8b2b63d206ec
has vulnerable target scope3 retained · stored CVE-2022-0847 → linux · linux_kernel04c85495-5852-442f-94a8-959d6b076d6872964884-35a9-40b3-aefc-cfe497909a7ab0c4a930-bb98-4a0f-aa07-3a2f70ec5314
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_power_little_endian_eusc52d2937-5f0e-40eb-8eed-eb85fbd5f2daf9329ab2-25d8-42ac-a793-6335fb2c0b14
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_ibm_z_systems_eus0641d7d8-a93b-4203-8b9a-05d61bd140529f6ff54a-e246-4e09-ba26-e89df5ca29e3
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h700s_firmware26f3b685-5f7b-4aa4-8edb-cdfcf2af1746
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h410c_firmwared8193c74-d759-4092-bcad-60f461f1b643
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_real_time_tus8c71694b-a2e4-4949-8f1f-b74a2b02227ca17fc77c-7bcb-446b-b03c-be49e139c57c
has vulnerable target scope1 retained · stored CVE-2022-0847 → siemens · scalance_lpe9403_firmwarec7c77b3f-a6dd-482d-b3ea-df316f67dc46
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · codeready_linux_builder4eafa3d8-d606-49e1-8bfc-e8741ec012d9
has vulnerable target scope1 retained · stored CVE-2022-0847 → ovirt · ovirt-enginee5ed5ff6-d21d-474e-a3e8-1922ded8c58b
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · virtualization_host19d438f7-9b28-4df3-a6cc-3cdabf7a45ba
has vulnerable target scope3 retained · stored CVE-2022-0847 → redhat · enterprise_linux_server_update_services_for_sap_solutionsb6f507b2-9e47-47c8-ab12-dad19da8f5b0cfd4dae0-3d05-4168-8a4d-bf060e3072cee8537537-350a-4e0e-9463-c8f833bee233
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_server_aus2e1044a3-2ea1-439d-802d-de2d90b1a776bebb66c8-7783-4ad8-a5ca-c2a90b0cfeec
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_real_time_for_nfvd03fd923-6926-42d3-9dbf-cd78d82afa99
has vulnerable target scope3 retained · stored CVE-2022-0847 → redhat · enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9bb179bc-e4f0-4d15-83c4-e8be1a9bfd5abe7ce87a-0d07-4999-8c92-6152c5fdd362c423c38f-7897-4c99-9d76-c5f1e96cd98e
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_eus3620e87d-2a6b-4555-b4e5-cc91e68f722ed5a006ad-b271-433b-a99c-37fddb7d04ea
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_real_time4182346a-e91f-4ad4-b12e-5c991b03aaf2
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h700e_firmware34866c10-6b55-4743-9a15-59960df63aa7
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h300s_firmware2d7bbe45-9131-4591-b083-655a865aa5a9
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_server_tus72b1f46e-8661-42ce-982b-80ef292a1884fda9b211-72b2-4021-ac69-aa0b2779529a
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h410s_firmware623553d8-3021-4989-a9d0-64bbe3c25824
has vulnerable target scope1 retained · stored CVE-2022-0847 → fedoraproject · fedorae159a060-25a5-4f51-957d-4748b6e72836
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_power_little_endian6e8f8008-c45a-4cfb-8a4d-dfc482d7aa68
has vulnerable target scope2 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_real_time_for_nfv_tuse61e47cc-2d30-4da3-b879-33654fa752fcf6f66cdc-0cc0-4acb-846d-50021e7edfc6
has vulnerable target scope1 retained · stored CVE-2022-0847 → sonicwall · sma1000_firmwaree2cf0b81-a180-48bf-a721-6a066cccd670
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · enterprise_linuxc962f672-5776-4a1c-91f8-6691e8616091
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h500s_firmwaredd82c289-5ec6-4731-be87-13a00a0d9549
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h500e_firmwarec8f73720-add9-450d-8ad8-14505fdfab42
has vulnerable target scope1 retained · stored CVE-2022-0847 → redhat · enterprise_linux_for_ibm_z_systems52d9f5e3-e22e-45cf-89d4-6a9574d19fa9
has vulnerable target scope1 retained · stored CVE-2022-0847 → netapp · h300e_firmwared6c98be7-4be0-4b37-955b-9b4e74c4325e