Patching CVE-2022-0847 - privilege escalation

Security

A vulnerability was found in Linux Kernel up to 5.10.101/5.15.24/5.16.10 named Dirty Pipe and classified as critical. This issue affects some unknown processing of the component Pipe Handler. Impacted is confidentiality, integrity, and availability. It’s affecting latest RHEL 8 kernel as well as its clones AlmaLinux 8, CloudLinux 8 and Rocky Linux 8. Latest Ubuntu is also affected.

At the time of the vulnerability public release, RHEL and Ubuntu haven’t patched yet their vulnarable kernel, see;

• https://access.redhat.com/security/cve/cve-2022-0847
• https://ubuntu.com/security/CVE-2022-0847

Update Ongoing patching | 2022-03-10 09:45:00

A patched kernel has been released for RHEL 8, AlmaLinux 8 and Rocky Linux 8:

• kernel-4.18.0-348.20.1

A patched kernel has been released for CloudLinux 8:

• kernel-4.18.0-348.12.2.lve.1

A patched kernel has been released for Proxmox 7:

• pve-kernel-5.13.19-5-pve

Ubuntu 20.04 kernel isn’t vulnerable

Update Resolved | 2022-03-14 09:45:00

All affected servers have been patched by our technical team.