CVE

CVE-2022-0847

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel

Date added (CISA)

2022-04-25

Remediation due

2022-05-16

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Associated with

Related to

Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTREcampaignCorrelated cluster2026-09-16
Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · ZshBucketcampaignCorrelated cluster2026-08-26
BadIIScampaignCorrelated cluster2026-08-26
SPECTREcampaignCorrelated cluster2026-08-20

Description

Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

Source: NVD ↗ · CISA KEV Catalog ↗