A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 4, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2 | Mar 11, 2022 | Feb 4, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 4, 2022 |
| Oracle_linux | — | Upgrade kernel | Mar 11, 2022 | Dec 14, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-core | Mar 5, 2024 | Feb 4, 2022 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-preemptUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-extraUpgrade dtb-alUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-zteUpgrade dtb-apmUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade dtb-xilinxUpgrade kernel-preempt-extraUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade cluster-md-kmp-preempt | Feb 4, 2022 | Jan 31, 2022 |
| Ubuntu | — | Upgrade linux-azure-5.11Upgrade linux-oracle-5.11Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-oem-5.13Upgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-oem-5.10Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeop-5.4Upgrade linux-gke-5.4Upgrade linux-raspiUpgrade linux-aws-5.11Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-riscv-5.11Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-gcp-5.11Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcp-5.4 | Nov 19, 2024 | Feb 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub