In the Linux kernel, the following vulnerability has been resolved:
cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
cgroup has to be one kernfs dir, otherwise kernel panic is caused, especially cgroup id is provide from userspace.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.73-48.135Upgrade python-perf | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel | Sep 25, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanilla | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-azure-fde-5.15Upgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-oracleUpgrade linux-awsUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcp-5.15 | Nov 19, 2024 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub