✳flâneur — a map of the web's best reading

The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation

dirtypipe.cm4all.com · 3,982 words · saved by 1 readers

This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit. The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. It all started a year ago with a support ticket about corrupt files. A customer complained that the access logs they downloaded could not be decompressed. And indeed, there was a corrupt log file on one of the log servers; it could be decompressed, but gzip reported a CRC error. I could not explain why it was corrupt, but I assumed the nightly split process had crashed and left a corrupt file behind. I fixed the file’s CRC manually, closed the ticket, and soon forgot about the problem. Months later, this happened again and yet again. Every time, the file’s contents looked correct, only the CRC at the end of the

The Dirty Pipe Vulnerability &#8212; The Dirty Pipe Vulnerability documentation The Dirty Pipe Vulnerability ¶ Max Kellermann < max &#46; kellermann &#64; ionos &#46; com > Abstract ¶ This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit. The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. Corruption pt. I ¶ It all started

Explore this link on the map →

saved by

related reading