In the Linux kernel, the following vulnerability has been resolved:
cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.73-48.135 | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel | Sep 25, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-gkeop-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-aws | Nov 19, 2024 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub