Company
Date Published
Author
Eric Smalling
Word count
1180
Language
English
Hacker News points
None

Summary

The "Dirty Pipe" Linux vulnerability (CVE-2022-0847) is a kernel-level flaw that allows any process to modify files regardless of their permission settings or ownership, posing a significant risk to containerized applications. Upgrading the host operating system to one of the specified kernel versions (5.16.11, 5.15.25, or 5.10.102) is the only known fix for this vulnerability. Container images are particularly vulnerable due to the use of read-write layers that can be modified by malicious actors, even if the volume was mounted with the `:ro` flag set. The vulnerability can also be exploited in host-mounted volumes, allowing attackers to gain elevated privileges and bypass normal protections.