coldbraid

CVE-2022-0847 Linux Kernel

Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

CVSS
not scored

CWE-665

On CISA’s exploited list

Linux Kernel Privilege Escalation Vulnerability

Added
2022-04-25
Federal patch deadline
2022-05-16
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)