A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python3-perf | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfo | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade perfUpgrade perf-debuginfo | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dlm-kmp-preemptUpgrade kernel-bigmem-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-bigmem-baseUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-trace-baseUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-pae-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-extraUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kernel-zfcpdump-manUpgrade kernel-ppc64-baseUpgrade kernel-preempt-optionalUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-kgraftUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-trace-develUpgrade gfs2-kmp-preemptUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-vanilla-baseUpgrade kernel-ec2Upgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-paeUpgrade kselftests-kmp-64kbUpgrade kernel-xenUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-bigmemUpgrade reiserfs-kmp-preemptUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade dtb-zteUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dtb-marvellUpgrade kernel-ppc64-develUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-alUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-xen-baseUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-debug-baseUpgrade dtb-freescaleUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade dtb-xilinxUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-qcomUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-devel | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1124-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-dell300xUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1069-awsUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-173-genericUpgrade linux-image-ibmUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-genericUpgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-105-genericUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1073-azureUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1019-aws | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub