A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.262-200.489Upgrade python-perf-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perf | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_7_1 | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-devel | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-debug | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade kernel-traceUpgrade kernel-64kbUpgrade kernel-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-xen-baseUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-ppc64Upgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-vanilla-develUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-alUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-pae-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-ec2Upgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade dtb-apmUpgrade reiserfs-kmp-preemptUpgrade dtb-lgUpgrade kernel-bigmemUpgrade kernel-xenUpgrade kernel-xen-develUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-paeUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-preempt-extraUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-ec2-baseUpgrade dtb-sprdUpgrade kernel-pae-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-default-kgraftUpgrade kernel-bigmem-baseUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-trace-develUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-ppc64-baseUpgrade kernel-bigmem-develUpgrade dtb-renesasUpgrade dlm-kmp-preemptUpgrade dtb-socionextUpgrade kernel-trace-baseUpgrade kselftests-kmp-preemptUpgrade dtb-armUpgrade kgraft-patch-4_4_180-94_156-default | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-awsUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1069-awsUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1134-azureUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1073-azureUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-105-genericUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-37-generic-lpae | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub