Is PAM Impacted by CVE-2022-0847?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

CVE-2022-0847, also known as Dirty Pipe, is a vulnerability on Linux that can grant non-root users improper privileges. How is PAM affected by the vulnerability?

Environment

Privileged Access Manager 3.4.x, 4.0.x

Resolution

According to the Debian website, only the Bullseye release is affected. The kernel on the PAM appliance is the Stretch release, which is not vulnerable.

Additional Information

Debian CVE-2022-0847 Information: https://security-tracker.debian.org/tracker/CVE-2022-0847