In the Linux kernel, the following vulnerability has been resolved:
cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfo | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Sep 25, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-preemptUpgrade dtb-lgUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdso | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotg | Nov 19, 2024 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub