An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade bpftool | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.268-205.500Upgrade python-perf | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perf | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-marvellUpgrade dlm-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-default-kgraftUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-freescaleUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-preempt-extraUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-zfcpdump-manUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-vanillaUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-base | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-oemUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1137-awsUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.14.0-1022-oemUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-4.15.0-189-genericUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-4.15.0-1146-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.13.0-37-generic | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub