A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-devel | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_31_1 | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-libs | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-modules | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-xen-baseUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-develUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-zteUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-macrosUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade kernel-vanillaUpgrade dtb-alUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-source-azureUpgrade kernel-ppc64Upgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-xenUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-bigmemUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-traceUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade kernel-vanilla-livepatch-develUpgrade kernel-trace-develUpgrade kernel-ec2-develUpgrade kernel-preempt-develUpgrade kernel-default-kgraftUpgrade kernel-bigmem-develUpgrade kernel-ec2-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-trace-baseUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-bigmem-baseUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-pae-develUpgrade kernel-preempt-optionalUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-amdUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-ppc64-baseUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dlm-kmp-preemptUpgrade dtb-socionextUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-default | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1134-azureUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-5.4.0-1073-azureUpgrade linux-image-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-105-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-azureUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-intelUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.14.0-1024-oemUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1069-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04 | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub