An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-cross-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extra | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.102-99.473Upgrade bpftoolUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-devel | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-cross-headers | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-zfcpdump-manUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-preemptUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-preemptUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-baseUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-extraUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-kgraftUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-debug-livepatch-devel | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-4.4.0-229-genericUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1137-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.14.0-1022-oemUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1145-awsUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-4.15.0-189-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1146-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.4.0-1078-awsUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04 | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub