A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.262-200.489 | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_12_2Upgrade kernelUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfo | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perf | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-modules | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-bigmemUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade kernel-debug-baseUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-traceUpgrade kernel-preemptUpgrade kernel-default-optionalUpgrade kernel-vanilla-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-ppc64-develUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-paeUpgrade kernel-vanilla-baseUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-ppc64Upgrade kernel-64kb-develUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-pae-baseUpgrade kernel-azure-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-xenUpgrade dtb-alUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-trace-baseUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade kernel-trace-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-preempt-extraUpgrade kernel-pae-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-preemptUpgrade kernel-ppc64-baseUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-ec2-develUpgrade dtb-amdUpgrade kernel-default-kgraftUpgrade gfs2-kmp-preemptUpgrade kernel-default-baseUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade kernel-bigmem-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-bigmem-develUpgrade reiserfs-kmp-azureUpgrade kernel-ec2-baseUpgrade dlm-kmp-default | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-173-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-5.4.0-1069-awsUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.4.0-105-genericUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-azureUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-5.4.0-1073-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4 | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub