CVE-2022-0847Vulnerability
Linux Kernel Privilege Escalation Vulnerability
Reported by 5 independent sources · first reported by Elastic Security Labs · last reported
Last reported 12 days ago
Fix due 16 May 2022
Used by ransomware: not knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026
What the reports say
7 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2022-0847”
-
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation“Linux Kernel - CVE-2022-0847”
-
August 2026 CVE Landscape“CVE-2022-0847”
-
Exploits and vulnerabilities in Q2 2026“CVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications”
-
Panic at the Distro“This kind of attack was most recently seen in 2022’s Dirty Pipe vulnerability (CVE-2022-0847), which when successfully exploited also resulted in local privilege escalation.”
-
Hooked on Linux: Rootkit Taxonomy, Hooking Techniques and Tradecraft“…he primary payload, often by exploiting local kernel vulnerabilities, a common tactic exemplified by the "Dirty Pipe" vulnerability (CVE-2022-0847).”
-
Detecting and responding to Dirty Pipe with Elastic“…oad scope (any user-readable file and affected Linux versions) along with its evolving nature (the SUID shell backdoor exploit) make CVE-2022-0847 especially dangerous for administrators of systems that are potentially vulnerable.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-60004, CVE-2026-63030, CVE-2026-43284, CVE-2017-0199, CVE-2026-31431, CVE-2026-43500, CVE-2026-46300, CVE-2026-35273, CVE-2026-39987, CVE-2026-60137, CVE-2021-29441, CVE-2026-81578, CVE-2026-82078, CVE-2023-54391, CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, CVE-2026-7273, CVE-2026-56271, CVE-2026-79756
Thanks — we review every report.