A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.96-90.460Upgrade bpftool-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kernelUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfo | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-devel | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-devel | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rtUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-tools | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade cluster-md-kmp-preemptUpgrade kernel-trace-baseUpgrade dtb-nvidiaUpgrade kernel-ec2-baseUpgrade dtb-amdUpgrade kernel-preempt-livepatch-develUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-livepatch-develUpgrade kernel-bigmem-develUpgrade kernel-pae-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-zfcpdump-manUpgrade kernel-bigmem-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-ec2-develUpgrade dtb-armUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-sprdUpgrade dlm-kmp-preemptUpgrade kernel-ppc64-baseUpgrade kernel-trace-develUpgrade kernel-ppc64Upgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-vanilla-baseUpgrade kernel-ec2Upgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade dtb-hisiliconUpgrade kernel-paeUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-xenUpgrade dtb-alUpgrade kernel-symsUpgrade kernel-bigmemUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-pae-baseUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-xen-develUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-ppc64-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-vanilla-develUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-baseUpgrade dtb-zteUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-debug | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-105-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-1073-azureUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-intelUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1069-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1124-aws-hwe | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub