CVE-2022-0847-dirty-pipe-checker

Bash script to check for CVE-2022-0847 Dirty Pipe

Abstract

This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes.

It is similar to CVE-2016-5195 “Dirty Cow” but is easier to exploit.

The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102.

How to use it

First

git clone https://github.com/muhammad1596/CVE-2022-0847-dirty-pipe-checker.git

Second

cd CVE-2022-0847-dirty-pipe-checker

Third

chmod +x dpipe.sh

Finally

Check current kernel version

./dpipe.sh

Check specific kernel version

./dpipe.sh 5.10.11