A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-develUpgrade kernel-libbpf | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kernelUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-348_2_1 | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perf | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade python3-perf | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-ec2-baseUpgrade cluster-md-kmp-64kbUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-ec2-develUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-extraUpgrade kernel-trace-develUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-preemptUpgrade kernel-bigmem-baseUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-bigmem-develUpgrade dtb-renesasUpgrade kernel-default-manUpgrade gfs2-kmp-preemptUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-vanilla-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-preempt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-kgraftUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-preemptUpgrade dtb-freescaleUpgrade kernel-traceUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-ppc64-develUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-xenUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-paeUpgrade reiserfs-kmp-preemptUpgrade dtb-caviumUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-64kb-develUpgrade dtb-alUpgrade kernel-bigmemUpgrade dtb-hisiliconUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-azure | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1073-azureUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-5.4.0-105-genericUpgrade linux-image-genericUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-dell300xUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1069-awsUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-gcp-lts-20.04 | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub