CVE-2022-0847 PoC — Linux kernel 安全漏洞

Source

Associated Vulnerability

Readme

# CVE-2022-0847-dirty-pipe-checker
Bash script to check for CVE-2022-0847 
[Dirty Pipe](https://dirtypipe.cm4all.com/)

<img src="https://f.hubspotusercontent-eu1.net/hubfs/25393921/dirty_pipe_option_2.png">

## Abstract
This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes.

It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.

The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102.

# How to use it

## First
```
git clone https://github.com/muhammad1596/CVE-2022-0847-dirty-pipe-checker.git
```
## Second 
```
cd CVE-2022-0847-dirty-pipe-checker
```
## Third
```
chmod +x dpipe.sh
```
## Finally
Check current kernel version

```
./dpipe.sh
```

Check specific kernel version

```
./dpipe.sh 5.10.11
```

File Snapshot

 [4.0K]  /data/pocs/939328ec462907c33d21ce3584e02334c7b1494c
├── [   1]  dirty-pipe-checker.sh
├── [1.8K]  dpipe.sh
├── [ 932]  README.md
└── [ 970]  test.sh

0 directories, 4 files

Remarks