Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

There is no reliable public model-by-model answer. The available ChromeOS sources do not identify which Chromebook models or builds were affected by Dirty Pipe (CVE-2022-0847), or the ChromeOS release in which a fix shipped. Keep ChromeOS updated through its built-in updater; if you use a separate Linux environment, update that environment through its own supported tools. Upstream Linux version numbers alone cannot establish whether a Chromebook is vulnerable or patched.

What Dirty Pipe is—and what an attacker would need

Dirty Pipe is the name for CVE-2022-0847, a Linux kernel flaw. The National Vulnerability Database (NVD) says stale values could remain in a pipe buffer’s flags member because it was not properly initialized in copy_page_to_iter_pipe and push_pipe. A local, unprivileged user could exploit the flaw to write to page-cache pages backed by read-only files, potentially escalating privileges. NVD rates it High, with a CVSS 3.x base score of 7.8. NVD’s CVE-2022-0847 record describes the vulnerability and affected upstream kernel ranges.

CISA’s March 10, 2022 alert also characterizes Dirty Pipe as a local privilege-escalation vulnerability that could let a local attacker take control of an affected system. The cited guidance describes a need for local access; it does not describe Dirty Pipe itself as a remote browser compromise. CISA’s alert provides its security guidance.

Why Linux version numbers do not answer the Chromebook question

CISA reported the flaw in Linux kernel versions 5.8 and later and advised updating to 5.16.11, 5.15.25, or 5.10.102 and later. NVD lists the corresponding upstream affected ranges as 5.8 up to, but not including, 5.10.102; 5.15 up to, but not including, 5.15.25; and 5.16 up to, but not including, 5.16.11. Those boundaries describe upstream Linux branches, not a universal Chromebook test. Vendors and distributions can maintain different kernels and backport security fixes, so comparing a device’s kernel number with those boundaries does not by itself establish exposure or patch status.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
HP 14" HD Chromebook Laptop for Students, Intel Quad-Core N4120(> N4020), 4GB RAM, 64GB eMMC, WiFi, Webcam, HDMI, USB-A&C, 14 Hours Battery Life, Zoom, Chrome OS, CUE Accessories
  • Intel Celeron N4120: 4 Cores & Threads, 1.1GHz Base Clock, Up to 2.6GHz Boost Clock, 4MB Cache, Intel UHD Graphics 600. The perfect combination of performance, power consumption, and value helps your device handle multitasking smoothly and reliably with four processing cores to divide up the work.

Ubuntu’s advisory explains that exploitation depends on two kernel changes: the stale pipe-buffer flags behavior and a later change enabling merging. Ubuntu says the latter is present starting with kernel 5.8 and recommends a kernel upgrade and reboot. Its package instructions and release-specific fixes apply to Ubuntu, not ChromeOS. Ubuntu’s CVE-2022-0847 advisory is useful for understanding that distribution’s remediation, but it should not be used to choose a ChromeOS fix version.

What is known about ChromeOS updates

The ChromeOS security-advisory index says many fixes are handled as security bugs and rolled out through ChromeOS auto-update rather than listed on a dedicated public advisory page. It explains: “We do not routinely publish information for all fixed vulnerabilities on a dedicated page, just for vulnerabilities where users/customers will benefit from a more in-depth description of the issue and/or where mitigative action by the user is necessary.” The ChromeOS security advisories index therefore cannot be treated as a complete list of every fix. Not finding a Dirty Pipe entry there is not proof that ChromeOS was unaffected or unpatched.

ChromeOS documentation describes isolation mechanisms including sandboxing, virtual machines, and containers. That general architecture does not establish whether a particular ChromeOS build was affected by this specific kernel flaw. The Chromium OS project documentation provides general ChromeOS context, not a Dirty Pipe affected-model list or fixed-build notice.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What Chromebook owners should do

Update the ChromeOS host

Use ChromeOS’s built-in updater and install updates offered for your device. The sources available for this issue do not provide a Dirty Pipe-specific ChromeOS build number, affected-model list, or fix date, so there is no supported version threshold to check against.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
ASUS 2026 15" FHD IPS Chromebook, Intel Processor Up to 2.80GHz, 4GB DDR4, 128GB Storage, HDMI, Super-Fast WiFi, Chrome OS, Pastel Silver (Renewed)
  • Intel Processor Up to 2.80GHz, 4GB DDR4, 128GB Storage
  • 15" FHD IPS Display, Intel UHD Graphics
  • 1x USB Type C, 1 x USB Type A, 1x Headphone/Microphone Combo Jack, HDMI
  • Fast WiFi and Bluetooth, Integrated Webcam
  • Chrome OS, AC Charger Included, Pastel Silver

Update a separate Linux environment separately

If you use a Linux development environment or another Linux distribution on your Chromebook, its kernel and packages have their own update path. Apply that environment’s supported updates; do not infer its status from the ChromeOS host version. Likewise, do not attempt to install an upstream Linux kernel on a standard Chromebook based on the upstream affected-version list.

Best Value
HP Chromebook 14 Laptop, Intel Celeron N4120, 4 GB RAM, 64 GB eMMC, 14" HD Display, Chrome OS, Thin Design, 4K Graphics, Long Battery Life, Ash Gray Keyboard (14a-na0226nr, 2022, Mineral Silver)
  • FOR HOME, WORK, & SCHOOL – With an Intel processor, 14-inch display, custom-tuned stereo speakers, and long battery life, this Chromebook laptop lets you knock out any assignment or binge-watch your favorite shows..Voltage:5.0 volts
  • HD DISPLAY, PORTABLE DESIGN – See every bit of detail on this micro-edge, anti-glare, 14-inch HD (1366 x 768) display (1); easily take this thin and lightweight laptop PC from room to room, on trips, or in a backpack.
  • ALL-DAY PERFORMANCE – Reliably tackle all your assignments at once with the quad-core, Intel Celeron N4120—the perfect processor for performance, power consumption, and value (2).
  • 4K READY – Smoothly stream 4K content and play your favorite next-gen games with Intel UHD Graphics 600 (3) (4).
  • MEMORY AND STORAGE – Enjoy a boost to your system’s performance with 4 GB of RAM while saving more of your favorite memories with 64 GB of reliable flash-based eMMC storage (5).
Rank #4
Sale
Lenovo Chromebook 2-in-1 - Lightweight Laptop - Google Gemini - Intel® N150 CPU - 14" WUXGA IPS Touchscreen Display - 4GB RAM - 128GB UFS Storage - Integrated Intel® Graphics - Luna Grey
  • THE BETTER WAY TO LAPTOP – Imagine a Chromebook that’s as flexible as your day: thin and lightweight with built-in Google apps and stress-free security.
  • TAKE HITS KEEP MOVING – Sleek, light, and built to last- the Chromebook 2-in-1 is just 0.69” thick and 3.3lbs. Enjoy long-lasting battery life, fast charging, and military-grade durability for nonstop productivity wherever life takes you.
  • PERFORMANCE THAT MATCHES YOUR HUSTLE – Fuel your ideas with an Intel Core processor and 128GB storage. Boot up in under 10 seconds to start the day powerfully efficient.
  • FLEX YOUR CREATIVITY ANYWHERE, ANYTIME – Create, work, or unwind your way with a versatile 2-in-1 design. Flip easily between laptop, tent, and tablet modes with a responsive touchscreen built for flexibility.
  • BRILLIANT VIEWS AND IMMERSIVE AUDIO – See, hear, and create with awesome clarity. The WUXGA display brings rich detail to your work and play, while audio tuned by Waves MaxxAudio provides immersive, balanced sound.

What the evidence does not establish

  • It does not establish that all Chromebooks were affected.
  • It does not establish whether a particular Chromebook model or ChromeOS build was affected.
  • It does not identify the precise ChromeOS release in which a Dirty Pipe fix shipped.
  • It does not make the upstream Linux version boundaries a reliable stand-alone test for a ChromeOS device.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.