Dirty Pipe Linux Vulnerability Discovered
The vulnerability – CVE-2022-0847 – was discovered by Max Kellermann in April 2021, but it took another few months for him to figure out what was actually happening. Kellermann explained that the vulnerability affects Linux Kernel 5.8 and later versions but was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. “It all started a year ago with a support ticket about corrupt files. A customer complained that the access logs they downloaded could not be decompressed....