CVE-2022-0847

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-665

Affected software

VendorProductVersions
n/akernelLinux Kernel 5.17 rc6

References

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 25, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-08489.8OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.CVE-2022-08495.5Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-08507.1A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.CVE-2022-08515.5There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subCVE-2022-08525.5There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could CVE-2022-08537.5A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeateCVE-2022-08545.5A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to CVE-2022-08556.1Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.CVE-2022-08566.5libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of ServiceCVE-2022-08576.1A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remoteCVE-2022-08584.7A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker CVE-2022-08596.7McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL serv
CVE-2022-0847: High severity, CVSS 7.8 | Vulnix