SECURITY
Dirty Pipe exploit found
Vulnerability could allow write access with root privileges.
Dirty Pipe is similar to the earlier Dirty Cow vulnerability, but easier to exploit.
Apotentially serious vulnerability has been discovered that affects the Linux kernel since 5.8. Max Kellerman, a security researcher, found the CVE-2022-0847 vulnerability, which is also known as Dirty Pipe. Max has revealed that it “allows overwriting data in arbitrary read-only files (see https://bit.ly/lxf288dirtypipe). This leads to privilege escalation because unprivileged processes can inject code into root processes.”