CVE-2022-0847

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0847
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0847.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-0847
Aliases
Downstream
Related
Published
2022-03-10T17:44:57.283Z
Modified
2026-02-19T01:36:38.193870Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

References

Affected packages

Git / github.com/wordpress/wordpress-develop

Affected ranges

Type
GIT
Repo
https://github.com/wordpress/wordpress-develop
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4357384fdc248c32a106dbbefeda94a330f1d316

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0847.json"