An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules | May 13, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Jan 25, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Apr 20, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 25, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perf | Apr 26, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Apr 19, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 18, 2022 | Sep 12, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-core | Mar 5, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade dtb-marvellUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-default-kgraftUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade reiserfs-kmp-preemptUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dlm-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-vanillaUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-alUpgrade dtb-mediatekUpgrade kernel-debug-baseUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-baseUpgrade dtb-rockchipUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-preemptUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-preempt | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1102-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1146-azureUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-4.15.0-189-genericUpgrade linux-image-4.15.0-189-generic-lpaeUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-37-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1131-gcpUpgrade linux-image-4.15.0-1137-aws-hweUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-4.15.0-1137-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1133-snapdragonUpgrade linux-image-azureUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1123-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1115-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.14.0-1022-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-189-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1049-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-229-lowlatency | Feb 9, 2022 | Jan 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub