Back to the CVE list
CVE-2022-0847 CISA KEV · Actively exploited

kernel: improper initialization of the "flags" member of the new pipe_buffer

CVSS score

7.8

EPSS probability

%92.8

Risk score

14.5

Published

4 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2022-0847 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2022-0847 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hat8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.10-202203101736_8.5.src View
2Red Hat8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.10-202203101736_8.5.x86_64 View
3Red HatBaseOS-8.1.0.Z.E4S:bpftool-0:4.18.0-147.64.1.el8_1.ppc64le View
4Red HatBaseOS-8.1.0.Z.E4S:bpftool-0:4.18.0-147.64.1.el8_1.x86_64 View
5Red HatBaseOS-8.1.0.Z.E4S:bpftool-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
6Red HatBaseOS-8.1.0.Z.E4S:bpftool-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
7Red HatBaseOS-8.1.0.Z.E4S:kernel-0:4.18.0-147.64.1.el8_1.ppc64le View
8Red HatBaseOS-8.1.0.Z.E4S:kernel-0:4.18.0-147.64.1.el8_1.src View
9Red HatBaseOS-8.1.0.Z.E4S:kernel-0:4.18.0-147.64.1.el8_1.x86_64 View
10Red HatBaseOS-8.1.0.Z.E4S:kernel-abi-whitelists-0:4.18.0-147.64.1.el8_1.noarch View
11Red HatBaseOS-8.1.0.Z.E4S:kernel-core-0:4.18.0-147.64.1.el8_1.ppc64le View
12Red HatBaseOS-8.1.0.Z.E4S:kernel-core-0:4.18.0-147.64.1.el8_1.x86_64 View
13Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-0:4.18.0-147.64.1.el8_1.ppc64le View
14Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-0:4.18.0-147.64.1.el8_1.x86_64 View
15Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-core-0:4.18.0-147.64.1.el8_1.ppc64le View
16Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-core-0:4.18.0-147.64.1.el8_1.x86_64 View
17Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
18Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
19Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-devel-0:4.18.0-147.64.1.el8_1.ppc64le View
20Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-devel-0:4.18.0-147.64.1.el8_1.x86_64 View
21Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-modules-0:4.18.0-147.64.1.el8_1.ppc64le View
22Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-modules-0:4.18.0-147.64.1.el8_1.x86_64 View
23Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-modules-extra-0:4.18.0-147.64.1.el8_1.ppc64le View
24Red HatBaseOS-8.1.0.Z.E4S:kernel-debug-modules-extra-0:4.18.0-147.64.1.el8_1.x86_64 View
25Red HatBaseOS-8.1.0.Z.E4S:kernel-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
26Red HatBaseOS-8.1.0.Z.E4S:kernel-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
27Red HatBaseOS-8.1.0.Z.E4S:kernel-debuginfo-common-ppc64le-0:4.18.0-147.64.1.el8_1.ppc64le View
28Red HatBaseOS-8.1.0.Z.E4S:kernel-debuginfo-common-x86_64-0:4.18.0-147.64.1.el8_1.x86_64 View
29Red HatBaseOS-8.1.0.Z.E4S:kernel-devel-0:4.18.0-147.64.1.el8_1.ppc64le View
30Red HatBaseOS-8.1.0.Z.E4S:kernel-devel-0:4.18.0-147.64.1.el8_1.x86_64 View
31Red HatBaseOS-8.1.0.Z.E4S:kernel-doc-0:4.18.0-147.64.1.el8_1.noarch View
32Red HatBaseOS-8.1.0.Z.E4S:kernel-modules-0:4.18.0-147.64.1.el8_1.ppc64le View
33Red HatBaseOS-8.1.0.Z.E4S:kernel-modules-0:4.18.0-147.64.1.el8_1.x86_64 View
34Red HatBaseOS-8.1.0.Z.E4S:kernel-modules-extra-0:4.18.0-147.64.1.el8_1.ppc64le View
35Red HatBaseOS-8.1.0.Z.E4S:kernel-modules-extra-0:4.18.0-147.64.1.el8_1.x86_64 View
36Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-0:4.18.0-147.64.1.el8_1.ppc64le View
37Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-0:4.18.0-147.64.1.el8_1.x86_64 View
38Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
39Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
40Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-libs-0:4.18.0-147.64.1.el8_1.ppc64le View
41Red HatBaseOS-8.1.0.Z.E4S:kernel-tools-libs-0:4.18.0-147.64.1.el8_1.x86_64 View
42Red HatBaseOS-8.1.0.Z.E4S:perf-0:4.18.0-147.64.1.el8_1.ppc64le View
43Red HatBaseOS-8.1.0.Z.E4S:perf-0:4.18.0-147.64.1.el8_1.x86_64 View
44Red HatBaseOS-8.1.0.Z.E4S:perf-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
45Red HatBaseOS-8.1.0.Z.E4S:perf-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
46Red HatBaseOS-8.1.0.Z.E4S:python3-perf-0:4.18.0-147.64.1.el8_1.ppc64le View
47Red HatBaseOS-8.1.0.Z.E4S:python3-perf-0:4.18.0-147.64.1.el8_1.x86_64 View
48Red HatBaseOS-8.1.0.Z.E4S:python3-perf-debuginfo-0:4.18.0-147.64.1.el8_1.ppc64le View
49Red HatBaseOS-8.1.0.Z.E4S:python3-perf-debuginfo-0:4.18.0-147.64.1.el8_1.x86_64 View
50Red HatBaseOS-8.2.0.Z.EUS:bpftool-0:4.18.0-193.79.1.el8_2.aarch64 View
51Red HatBaseOS-8.2.0.Z.EUS:bpftool-0:4.18.0-193.79.1.el8_2.ppc64le View
52Red HatBaseOS-8.2.0.Z.EUS:bpftool-0:4.18.0-193.79.1.el8_2.s390x View
53Red HatBaseOS-8.2.0.Z.EUS:bpftool-0:4.18.0-193.79.1.el8_2.x86_64 View
54Red HatBaseOS-8.2.0.Z.EUS:bpftool-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
55Red HatBaseOS-8.2.0.Z.EUS:bpftool-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
56Red HatBaseOS-8.2.0.Z.EUS:bpftool-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
57Red HatBaseOS-8.2.0.Z.EUS:bpftool-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
58Red HatBaseOS-8.2.0.Z.EUS:kernel-0:4.18.0-193.79.1.el8_2.aarch64 View
59Red HatBaseOS-8.2.0.Z.EUS:kernel-0:4.18.0-193.79.1.el8_2.ppc64le View
60Red HatBaseOS-8.2.0.Z.EUS:kernel-0:4.18.0-193.79.1.el8_2.s390x View
61Red HatBaseOS-8.2.0.Z.EUS:kernel-0:4.18.0-193.79.1.el8_2.src View
62Red HatBaseOS-8.2.0.Z.EUS:kernel-0:4.18.0-193.79.1.el8_2.x86_64 View
63Red HatBaseOS-8.2.0.Z.EUS:kernel-abi-whitelists-0:4.18.0-193.79.1.el8_2.noarch View
64Red HatBaseOS-8.2.0.Z.EUS:kernel-core-0:4.18.0-193.79.1.el8_2.aarch64 View
65Red HatBaseOS-8.2.0.Z.EUS:kernel-core-0:4.18.0-193.79.1.el8_2.ppc64le View
66Red HatBaseOS-8.2.0.Z.EUS:kernel-core-0:4.18.0-193.79.1.el8_2.s390x View
67Red HatBaseOS-8.2.0.Z.EUS:kernel-core-0:4.18.0-193.79.1.el8_2.x86_64 View
68Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-0:4.18.0-193.79.1.el8_2.aarch64 View
69Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-0:4.18.0-193.79.1.el8_2.ppc64le View
70Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-0:4.18.0-193.79.1.el8_2.s390x View
71Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-0:4.18.0-193.79.1.el8_2.x86_64 View
72Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-core-0:4.18.0-193.79.1.el8_2.aarch64 View
73Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-core-0:4.18.0-193.79.1.el8_2.ppc64le View
74Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-core-0:4.18.0-193.79.1.el8_2.s390x View
75Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-core-0:4.18.0-193.79.1.el8_2.x86_64 View
76Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
77Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
78Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
79Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
80Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-devel-0:4.18.0-193.79.1.el8_2.aarch64 View
81Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-devel-0:4.18.0-193.79.1.el8_2.ppc64le View
82Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-devel-0:4.18.0-193.79.1.el8_2.s390x View
83Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-devel-0:4.18.0-193.79.1.el8_2.x86_64 View
84Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-0:4.18.0-193.79.1.el8_2.aarch64 View
85Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-0:4.18.0-193.79.1.el8_2.ppc64le View
86Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-0:4.18.0-193.79.1.el8_2.s390x View
87Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-0:4.18.0-193.79.1.el8_2.x86_64 View
88Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-193.79.1.el8_2.aarch64 View
89Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-193.79.1.el8_2.ppc64le View
90Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-193.79.1.el8_2.s390x View
91Red HatBaseOS-8.2.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-193.79.1.el8_2.x86_64 View
92Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
93Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
94Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
95Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
96Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-common-aarch64-0:4.18.0-193.79.1.el8_2.aarch64 View
97Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:4.18.0-193.79.1.el8_2.ppc64le View
98Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-common-s390x-0:4.18.0-193.79.1.el8_2.s390x View
99Red HatBaseOS-8.2.0.Z.EUS:kernel-debuginfo-common-x86_64-0:4.18.0-193.79.1.el8_2.x86_64 View
100Red HatBaseOS-8.2.0.Z.EUS:kernel-devel-0:4.18.0-193.79.1.el8_2.aarch64 View
101Red HatBaseOS-8.2.0.Z.EUS:kernel-devel-0:4.18.0-193.79.1.el8_2.ppc64le View
102Red HatBaseOS-8.2.0.Z.EUS:kernel-devel-0:4.18.0-193.79.1.el8_2.s390x View
103Red HatBaseOS-8.2.0.Z.EUS:kernel-devel-0:4.18.0-193.79.1.el8_2.x86_64 View
104Red HatBaseOS-8.2.0.Z.EUS:kernel-doc-0:4.18.0-193.79.1.el8_2.noarch View
105Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-0:4.18.0-193.79.1.el8_2.aarch64 View
106Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-0:4.18.0-193.79.1.el8_2.ppc64le View
107Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-0:4.18.0-193.79.1.el8_2.s390x View
108Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-0:4.18.0-193.79.1.el8_2.x86_64 View
109Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-extra-0:4.18.0-193.79.1.el8_2.aarch64 View
110Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-extra-0:4.18.0-193.79.1.el8_2.ppc64le View
111Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-extra-0:4.18.0-193.79.1.el8_2.s390x View
112Red HatBaseOS-8.2.0.Z.EUS:kernel-modules-extra-0:4.18.0-193.79.1.el8_2.x86_64 View
113Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-0:4.18.0-193.79.1.el8_2.aarch64 View
114Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-0:4.18.0-193.79.1.el8_2.ppc64le View
115Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-0:4.18.0-193.79.1.el8_2.s390x View
116Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-0:4.18.0-193.79.1.el8_2.x86_64 View
117Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
118Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
119Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
120Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
121Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-libs-0:4.18.0-193.79.1.el8_2.aarch64 View
122Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-libs-0:4.18.0-193.79.1.el8_2.ppc64le View
123Red HatBaseOS-8.2.0.Z.EUS:kernel-tools-libs-0:4.18.0-193.79.1.el8_2.x86_64 View
124Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-0:4.18.0-193.79.1.el8_2.s390x View
125Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-core-0:4.18.0-193.79.1.el8_2.s390x View
126Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
127Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-devel-0:4.18.0-193.79.1.el8_2.s390x View
128Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-modules-0:4.18.0-193.79.1.el8_2.s390x View
129Red HatBaseOS-8.2.0.Z.EUS:kernel-zfcpdump-modules-extra-0:4.18.0-193.79.1.el8_2.s390x View
130Red HatBaseOS-8.2.0.Z.EUS:perf-0:4.18.0-193.79.1.el8_2.aarch64 View
131Red HatBaseOS-8.2.0.Z.EUS:perf-0:4.18.0-193.79.1.el8_2.ppc64le View
132Red HatBaseOS-8.2.0.Z.EUS:perf-0:4.18.0-193.79.1.el8_2.s390x View
133Red HatBaseOS-8.2.0.Z.EUS:perf-0:4.18.0-193.79.1.el8_2.x86_64 View
134Red HatBaseOS-8.2.0.Z.EUS:perf-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
135Red HatBaseOS-8.2.0.Z.EUS:perf-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
136Red HatBaseOS-8.2.0.Z.EUS:perf-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
137Red HatBaseOS-8.2.0.Z.EUS:perf-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
138Red HatBaseOS-8.2.0.Z.EUS:python3-perf-0:4.18.0-193.79.1.el8_2.aarch64 View
139Red HatBaseOS-8.2.0.Z.EUS:python3-perf-0:4.18.0-193.79.1.el8_2.ppc64le View
140Red HatBaseOS-8.2.0.Z.EUS:python3-perf-0:4.18.0-193.79.1.el8_2.s390x View
141Red HatBaseOS-8.2.0.Z.EUS:python3-perf-0:4.18.0-193.79.1.el8_2.x86_64 View
142Red HatBaseOS-8.2.0.Z.EUS:python3-perf-debuginfo-0:4.18.0-193.79.1.el8_2.aarch64 View
143Red HatBaseOS-8.2.0.Z.EUS:python3-perf-debuginfo-0:4.18.0-193.79.1.el8_2.ppc64le View
144Red HatBaseOS-8.2.0.Z.EUS:python3-perf-debuginfo-0:4.18.0-193.79.1.el8_2.s390x View
145Red HatBaseOS-8.2.0.Z.EUS:python3-perf-debuginfo-0:4.18.0-193.79.1.el8_2.x86_64 View
146Red HatBaseOS-8.4.0.Z.EUS:bpftool-0:4.18.0-305.40.2.el8_4.aarch64 View
147Red HatBaseOS-8.4.0.Z.EUS:bpftool-0:4.18.0-305.40.2.el8_4.ppc64le View
148Red HatBaseOS-8.4.0.Z.EUS:bpftool-0:4.18.0-305.40.2.el8_4.s390x View
149Red HatBaseOS-8.4.0.Z.EUS:bpftool-0:4.18.0-305.40.2.el8_4.x86_64 View
150Red HatBaseOS-8.4.0.Z.EUS:bpftool-debuginfo-0:4.18.0-305.40.2.el8_4.aarch64 View
151Red HatBaseOS-8.4.0.Z.EUS:bpftool-debuginfo-0:4.18.0-305.40.2.el8_4.ppc64le View
152Red HatBaseOS-8.4.0.Z.EUS:bpftool-debuginfo-0:4.18.0-305.40.2.el8_4.s390x View
153Red HatBaseOS-8.4.0.Z.EUS:bpftool-debuginfo-0:4.18.0-305.40.2.el8_4.x86_64 View
154Red HatBaseOS-8.4.0.Z.EUS:kernel-0:4.18.0-305.40.2.el8_4.aarch64 View
155Red HatBaseOS-8.4.0.Z.EUS:kernel-0:4.18.0-305.40.2.el8_4.ppc64le View
156Red HatBaseOS-8.4.0.Z.EUS:kernel-0:4.18.0-305.40.2.el8_4.s390x View
157Red HatBaseOS-8.4.0.Z.EUS:kernel-0:4.18.0-305.40.2.el8_4.src View
158Red HatBaseOS-8.4.0.Z.EUS:kernel-0:4.18.0-305.40.2.el8_4.x86_64 View
159Red HatBaseOS-8.4.0.Z.EUS:kernel-abi-stablelists-0:4.18.0-305.40.2.el8_4.noarch View
160Red HatBaseOS-8.4.0.Z.EUS:kernel-core-0:4.18.0-305.40.2.el8_4.aarch64 View
161Red HatBaseOS-8.4.0.Z.EUS:kernel-core-0:4.18.0-305.40.2.el8_4.ppc64le View
162Red HatBaseOS-8.4.0.Z.EUS:kernel-core-0:4.18.0-305.40.2.el8_4.s390x View
163Red HatBaseOS-8.4.0.Z.EUS:kernel-core-0:4.18.0-305.40.2.el8_4.x86_64 View
164Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-0:4.18.0-305.40.2.el8_4.aarch64 View
165Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-0:4.18.0-305.40.2.el8_4.ppc64le View
166Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-0:4.18.0-305.40.2.el8_4.s390x View
167Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-0:4.18.0-305.40.2.el8_4.x86_64 View
168Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-core-0:4.18.0-305.40.2.el8_4.aarch64 View
169Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-core-0:4.18.0-305.40.2.el8_4.ppc64le View
170Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-core-0:4.18.0-305.40.2.el8_4.s390x View
171Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-core-0:4.18.0-305.40.2.el8_4.x86_64 View
172Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-305.40.2.el8_4.aarch64 View
173Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-305.40.2.el8_4.ppc64le View
174Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-305.40.2.el8_4.s390x View
175Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-debuginfo-0:4.18.0-305.40.2.el8_4.x86_64 View
176Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-devel-0:4.18.0-305.40.2.el8_4.aarch64 View
177Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-devel-0:4.18.0-305.40.2.el8_4.ppc64le View
178Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-devel-0:4.18.0-305.40.2.el8_4.s390x View
179Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-devel-0:4.18.0-305.40.2.el8_4.x86_64 View
180Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-0:4.18.0-305.40.2.el8_4.aarch64 View
181Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-0:4.18.0-305.40.2.el8_4.ppc64le View
182Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-0:4.18.0-305.40.2.el8_4.s390x View
183Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-0:4.18.0-305.40.2.el8_4.x86_64 View
184Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-305.40.2.el8_4.aarch64 View
185Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-305.40.2.el8_4.ppc64le View
186Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-305.40.2.el8_4.s390x View
187Red HatBaseOS-8.4.0.Z.EUS:kernel-debug-modules-extra-0:4.18.0-305.40.2.el8_4.x86_64 View
188Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-0:4.18.0-305.40.2.el8_4.aarch64 View
189Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-0:4.18.0-305.40.2.el8_4.ppc64le View
190Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-0:4.18.0-305.40.2.el8_4.s390x View
191Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-0:4.18.0-305.40.2.el8_4.x86_64 View
192Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-common-aarch64-0:4.18.0-305.40.2.el8_4.aarch64 View
193Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:4.18.0-305.40.2.el8_4.ppc64le View
194Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-common-s390x-0:4.18.0-305.40.2.el8_4.s390x View
195Red HatBaseOS-8.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:4.18.0-305.40.2.el8_4.x86_64 View
196Red HatBaseOS-8.4.0.Z.EUS:kernel-devel-0:4.18.0-305.40.2.el8_4.aarch64 View
197Red HatBaseOS-8.4.0.Z.EUS:kernel-devel-0:4.18.0-305.40.2.el8_4.ppc64le View
198Red HatBaseOS-8.4.0.Z.EUS:kernel-devel-0:4.18.0-305.40.2.el8_4.s390x View
199Red HatBaseOS-8.4.0.Z.EUS:kernel-devel-0:4.18.0-305.40.2.el8_4.x86_64 View
200Red HatBaseOS-8.4.0.Z.EUS:kernel-doc-0:4.18.0-305.40.2.el8_4.noarch View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Not affected

Red Hat VEX kaydına göre bu ürün etkilenmiyor.

Red Hat fixes

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8cvss_v3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

16 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

Currently there is no mitigation available for this flaw. Customers should update to fixed packages, once they are available.

reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

This CVE is marked as actively exploited in the CISA KEV catalogue, but no verified, downloadable public PoC or Metasploit module has been found yet. Evidence of active exploitation does not mean that public exploit code exists.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-0847 is associated with the following CWEs:

CWE-908: Common Weakness Enumeration Entry CWE-908

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-0847 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#2060795vendor-advisoryRHSB-2022-002vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2022-0847vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2022-0847vendor-advisoryhttps://dirtypipe.cm4all.com/vendor-advisoryhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/lib/iov_iter.c?id=9d2231c5d74e13b2a0546fee6737ee4446017903vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patch

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

16 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

RH
Red Hat logo
Red Hat

Weakness Type (CWE & CAPEC)

CWE-908

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2022-0847"