
This is the story of CVE-2022-0847, a vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes.
这是关于CVE-2022-0847的故事,该漏洞自Linux内核5.8版本起存在,允许覆盖任意只读文件中的数据。这会导致权限提升,因为非特权进程可以将代码注入到root进程中。