An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modules | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perf | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade reiserfs-kmp-preemptUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-preemptUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdump-manUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-vanillaUpgrade kernel-debug-baseUpgrade dtb-alUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-source-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.14.0-1022-oemUpgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1145-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1137-awsUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-4.15.0-1146-azureUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-4.15.0-189-genericUpgrade linux-image-5.4.0-1078-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1083-azureUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-117-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-dell300xUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04d | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub