ACTIVELY EXPLOITED

CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability

Facts
VendorLinux
ProductKernel
Actively exploitedYes
Added to CISA KEV25 Apr 2022
CISA federal deadline16 May 2022
Weakness (CWE)CWE-665

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

SOURCES

Other Linux flaws

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.