Linux distros patch 'DirtyPipe' make-me-root kernel bug #TheRe | Vulnerability Management and more

Linux distros patch 'DirtyPipe' make-me-root kernel bug
#TheRegisterNews

"A Linux local privilege escalation flaw dubbed Dirty Pipe has been discovered and disclosed along with proof-of-concept exploit code.
The flaw, CVE-2022-0847, was introduced in kernel version 5.8 and fixed in versions 5.16.11, 5.15.25 and 5.10.102.
It can be exploited by a normal logged-in user or a rogue running program to gain root-level privileges; it can also be used by malicious apps to take over vulnerable Android devices. Max Kellermann said he found the programming blunder and reported it to the kernel security team in February, which issued patches within a few days. By now these..."

https://www.theregister.com/2022/03/08/in_brief_security/