CVE-2022-0847

A Linux kernel flaw allows unprivileged users to write to read-only files through uninitialized memory in pipe functions, enabling privilege escalation on affected systems.

The vulnerability exists in copy_page_to_iter_pipe and push_pipe functions where the 'flags' member of the pipe buffer structure is not properly initialized, allowing stale values to persist. An unprivileged local attacker can exploit this to write arbitrary data to page cache pages backed by read-only files, bypassing access controls and escalating privileges.