A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.96-90.460Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.262-200.489Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo | Jul 4, 2022 | Mar 3, 2022 |
| Amazon_linux | — | Upgrade kernel | Feb 8, 2022 | Feb 4, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfo | Feb 17, 2025 | Feb 7, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfo | Mar 11, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jun 2, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | May 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Apr 25, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Apr 11, 2022 | Mar 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | May 30, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 9, 2022 | Feb 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 11, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-tools | May 5, 2022 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade dtb-renesasUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-preempt-optionalUpgrade kernel-trace-baseUpgrade kernel-default-base-rebuildUpgrade kernel-pae-develUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-trace-develUpgrade kernel-bigmem-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-preemptUpgrade kernel-bigmem-baseUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-kgraftUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-pae-baseUpgrade dtb-hisiliconUpgrade kernel-bigmemUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-zteUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-vanilla-baseUpgrade kernel-ec2Upgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-develUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-kvmsmallUpgrade kernel-debug-baseUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-ppc64-develUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-develUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-azure-develUpgrade dtb-alUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-xenUpgrade kernel-symsUpgrade dtb-lgUpgrade reiserfs-kmp-preempt | Mar 9, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1110-kvmUpgrade linux-image-5.4.0-105-genericUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-105-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-173-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-1073-azureUpgrade linux-image-4.15.0-1123-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1056-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.15.0-1038-dell300xUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1134-azureUpgrade linux-image-intelUpgrade linux-image-5.4.0-105-generic-lpaeUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.4.0-1018-ibmUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1010-intelUpgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1106-raspi2Upgrade linux-image-azureUpgrade linux-image-5.4.0-1037-gkeopUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-173-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1059-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1066-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1073-azure-fdeUpgrade linux-image-dell300xUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1068-gcpUpgrade linux-image-4.15.0-1124-aws-hweUpgrade linux-image-4.15.0-1124-awsUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.4.0-1069-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.14.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1119-gcpUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.4.0-1067-oracleUpgrade linux-image-4.15.0-173-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-4.15.0-1090-oracleUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-ibm | Feb 23, 2022 | Feb 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub