A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.262-200.489Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python3-perf | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348 | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perf | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headers | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perf | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kselftests-kmp-azureUpgrade kernel-bigmemUpgrade kernel-xenUpgrade kernel-azure-extraUpgrade kernel-xen-develUpgrade kernel-ec2Upgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-pae-baseUpgrade kernel-ppc64Upgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-vanilla-baseUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-paeUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-azure-baseUpgrade kernel-vanilla-develUpgrade kernel-default-optionalUpgrade kernel-traceUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade dtb-marvellUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-baseUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-ec2-baseUpgrade kernel-zfcpdump-manUpgrade kernel-ec2-develUpgrade kernel-preempt-develUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-vanilla-livepatch-develUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-preempt-extraUpgrade kernel-pae-develUpgrade dtb-sprdUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-preempt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-rockchipUpgrade kernel-ppc64-baseUpgrade kernel-bigmem-baseUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-kgraftUpgrade dtb-amdUpgrade kernel-bigmem-develUpgrade dtb-renesasUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade gfs2-kmp-default | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1069-awsUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-bluefieldUpgrade linux-image-dell300xUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.4.0-1073-azureUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.4.0-105-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-4.15.0-1123-snapdragon | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub