Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

CVE-2022-0847 PoC — Linux kernel 安全漏洞

Source
Associated Vulnerability
Title:Linux kernel 安全漏洞 (CVE-2022-0847)
Description:A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.
Readme
# Dirty_Pipe_virus

Dirty Pipe is a kind of Linux exploit. Its CVE is CVE 2022-0847.

We use it to delete all files on your Ubuntu.

# Environment:

Ubuntu 20.04

Linux Kernel 5.8

This is the ova file of Ubuntu 20.04: [https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228_o365_ttu_edu_tw/EWPK1npa-V5Eheb_EOrwhocBMaKH12xVcIdtdkxxU3UFNg?e=clKIbQ](https://ttuedutw-my.sharepoint.com/:u:/g/personal/410806228_o365_ttu_edu_tw/EWPK1npa-V5Eheb_EOrwhocBL0D3Is3JOp6_HklzpDAFDA)

Password: ShaoLei0518

## Compiling the exploit
- An automated compiler bash script has been provided to you to automate the compilation of both exploits.
- In order to compile the exploit succesfully, you will need to have GCC installed.

```
sudo apt-get install gcc
```

- After installing GCC, you can run the 'compile.sh" script as follows:

```
chmod +x compile.sh
```
```
./compile.sh
```

# Disclaimer
I make this malware just want to show the CVE 2022-0847. Please don't use this to do something illegal.

If you do it, I'm not responsible for this. Thank you.


# Reference

Thank you for AlexisAhmed

https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits/tree/main
File Snapshot

[4.0K] /data/pocs/e5a530dbe3bc60f78c9999135a2aa7a44057266f ├── [ 42] compile.sh ├── [4.3K] exploit-1.c ├── [1.0K] LICENSE └── [1.1K] README.md 0 directories, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →