Beveiligingsadvies

CVE-2021-4154

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-02-04 22:29:17
Laatst bijgewerkt 2024-08-03 17:16:04
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.