Dirty Pipe Linux Vulnerability: Overwriting Files in Container Images

This report details CVE-2022-0847 (“Dirty Pipe”), a Linux kernel vulnerability (affecting kernel 5.8+) that permits local attackers — including processes running inside containers — to overwrite files from read-only image layers or read-only host mounts; the author demonstrates a working exploit against an ubuntu:21.04 Docker image, explains risks to shared container images and mounted volumes, and recommends immediate kernel patching and host reboots as mitigation.