CVE-2021-4154

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2034514	Issue Tracking Patch
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b	Mailing List Patch
https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2022-002	Third Party Advisory
https://security.netapp.com/advisory/ntap-20220225-0004/	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h300e:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h500e:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h700e:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*

---

Published : 2022-02-04 11:15

Updated : 2023-01-19 03:53

---

NVD link : CVE-2021-4154

Mitre link : CVE-2021-4154

No products.

CWE-416