New critical Linux kernel vulnerability (Dirty Pipe) fixed hours after detection
Posted: Wed Dec 18, 2024 8:09 am
Earlier today, our security team received confirmation about a critical vulnerability in Linux affecting all kernels since 5.8 ( CVE-2022-0847 ). Dubbed as The Dirty Pipe , the vulnerability poses an extremely high security risk, allowing attackers to overwrite key website files and gain full access to servers. Needless to say, it is a major security threat with a very large scope allowing unprivileged access to root processes and configuration files.
Our security team started working on it immediately after the initial reports. Although the lebanon whatsapp number data Linux kernel is third-party software, we at SiteGround have always been proactive, with a dedicated and expert security team rather than waiting for an official patch to be released. Our kernel specialists developed a custom mitigation that was thoroughly tested. Once we were confident that no other functionalities were affected, the fix was deployed to all of our systems and servers, hours after the vulnerability was discovered.
We were among the first, if not the first hosting, to successfully write and deploy a patch against this high-risk security threat. At the moment, no SiteGround servers have been affected by this vulnerability and there has been no downtime involved in the entire process. Our customers are fully protected and do not need to make any changes!
Author avatar
Hristo Pandjarov
Director of Product Innovation
Enthusiast of all the Open Source applications you can imagine, but WordPress more than any other. Add a pinch of love for web design, new technologies, SEO and there you have it!
Security
Share this article
Comments ( 2 )
Author avatar
Matias Araus
Mar 10, 2022
Excellent! What a relief to read how quickly they work. Applause for the whole team
Reply
Author avatar
Wilkins Morales
The SiteGround Team
Mar 10, 2022
Thank you very much, Matias!
Reply
Our security team started working on it immediately after the initial reports. Although the lebanon whatsapp number data Linux kernel is third-party software, we at SiteGround have always been proactive, with a dedicated and expert security team rather than waiting for an official patch to be released. Our kernel specialists developed a custom mitigation that was thoroughly tested. Once we were confident that no other functionalities were affected, the fix was deployed to all of our systems and servers, hours after the vulnerability was discovered.
We were among the first, if not the first hosting, to successfully write and deploy a patch against this high-risk security threat. At the moment, no SiteGround servers have been affected by this vulnerability and there has been no downtime involved in the entire process. Our customers are fully protected and do not need to make any changes!
Author avatar
Hristo Pandjarov
Director of Product Innovation
Enthusiast of all the Open Source applications you can imagine, but WordPress more than any other. Add a pinch of love for web design, new technologies, SEO and there you have it!
Security
Share this article
Comments ( 2 )
Author avatar
Matias Araus
Mar 10, 2022
Excellent! What a relief to read how quickly they work. Applause for the whole team
Reply
Author avatar
Wilkins Morales
The SiteGround Team
Mar 10, 2022
Thank you very much, Matias!
Reply