Exploit / PoCcritical
8-year-old Linux Kernel flaw DirtyCred is nasty as Dirty Pipe
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-4154 | A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser | 8.8 | 1% | ||
| CVE-2022-0847 | Local Privilege Escalation ('Dirty Pipe') in the Linux Kernel | 7.8 | 93% | KEVPoC ×4 | KEV |
| CVE-2022-2588 | It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its… | 7.8 | 6% | PoC |
From the original article
2 min read at securityaffairs.com
Researchers shared details of an eight-year-old flaw dubbed DirtyCred , defined as nasty as Dirty Pipe, in the Linux kernel. Researchers from Northwestern University ( Zhenpeng Lin | PhD Student, Yuhang Wu | PhD Student, Xinyu Xing | Associate Professor) disclosed an eight-year-old security vulnerability in the Linux kernel, dubbed DirtyCred , which they defined “as nasty as Dirty Pipe .”
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.