CVE-2022-0847

An unprivileged local user could escalate privileges on Linux systems via the 'Dirty Pipe' improper initialization vulnerability.

The Linux kernel's 'Dirty Pipe' vulnerability allowed local privilege escalation, meaning attackers with minimal access could gain full system control. DIB organizations must ensure all Linux systems are patched immediately, as this flaw was actively exploited in the wild and represents a severe, avoidable failure in kernel hardening. Failure to patch exposes systems to lateral movement and data exfiltration, directly impacting CMMC/NIST 800-171 compliance by violating system integrity and access control requirements.

Shame score — A fundamental kernel flaw that was actively exploited in the wild, demonstrating severe negligence in patching and hardening critical infrastructure.