Linux 本地权限提升漏洞 CVE-2022-0847

内核影响版本：5.8 <= Linux kernel < 5.16.11 / 5.15.25 / 5.10.102

Twitter：

Talk about 2 POC of DirtyPipe(CVE-2022-0847)
Original POC: https://t.co/QBHYU6i33N is able to overwrite arbitrary file with offset like ./exp /etc/passwd 5 ":0:0:rootx"
Improved POC: https://t.co/qurmceoXI8 is able to overwrite a SUID program like ./exp /usr/bin/su pic.twitter.com/telIWSYG67

— Phith0n (@phithon_xg) March 7, 2022

POC：

https://haxx.in/files/dirtypipez.c

Github：

https://github.com/badboycxcc/script/blob/main/dirtypipez.c