An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debug-modules | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.10.102-99.473Upgrade perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-devel | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perf | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-core | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade kselftests-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-lgUpgrade dtb-alUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-preempt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-preempt-extraUpgrade kernel-64kb-optionalUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-kgraftUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade reiserfs-kmp-preemptUpgrade kernel-default-manUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-apmUpgrade dlm-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-preempt-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-amlogic | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-oemUpgrade linux-image-gke-5.4Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1137-awsUpgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-229-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-189-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-4.15.0-1146-azureUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-37-generic-lpae | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub