An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-cross-headers | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade bpftool-debuginfo | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-tools | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade cluster-md-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-vanillaUpgrade kernel-azure-develUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade ocfs2-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade dtb-alUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade kernel-preempt-extraUpgrade kernel-preempt-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-preemptUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-kgraftUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-default-livepatchUpgrade kernel-docs-html | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-4.15.0-1137-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-4.15.0-189-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-awsUpgrade linux-image-4.15.0-1146-azureUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvm | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub