Lucene search

CVE-2021-4154

🗓️ 04 Feb 2022 23:12:15Reported by redhatType

cve🔗 web.nvd.nist.gov👁 405 Views🌐 4 Media mentions

Use-after-free flaw in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in Linux kernel's cgroup v1 parser, leading to privilege escalation and container breakout

Reporter	Title	Published	Views	Family All 68
F5 Networks	K70023694 : Linux kernel vulnerability CVE-2021-4154	21 Oct 202200:00	–	f5
NVD	CVE-2021-4154	4 Feb 202223:15	–	nvd
Prion	Design/Logic Flaw	4 Feb 202223:15	–	prion
Veracode	Privilege Escalation	26 Jan 202205:21	–	veracode
CBLMariner	CVE-2021-4154 affecting package kernel 5.10.161.1-1	25 Feb 202201:46	–	cbl_mariner
RedhatCVE	CVE-2021-4154	22 Dec 202105:20	–	redhatcve
GithubExploit	Exploit for Use After Free in Linux Linux Kernel	11 Aug 202205:46	–	githubexploit
GithubExploit	Exploit for Use After Free in Linux Linux Kernel	23 Feb 202308:38	–	githubexploit
OSV	Linux kernel vulnerability advisory	1 Jun 202200:00	–	osv
OSV	Red Hat Security Advisory: kernel security, bug fix, and enhancement update	13 Sep 202417:31	–	osv

Nvd

Vulners

Node

linux linux_kernelRange5.1–5.4.134

linux linux_kernelRange5.5–5.10.52

linux linux_kernelRange5.11–5.12.19

linux linux_kernelRange5.13–5.13.4

linux linux_kernelMatch5.14rc1

Node

redhat virtualizationMatch4.0

redhat enterprise_linuxMatch8.0-

Node

netapp hci_baseboard_management_controllerMatchh300e

netapp hci_baseboard_management_controllerMatchh300s

netapp hci_baseboard_management_controllerMatchh410s

netapp hci_baseboard_management_controllerMatchh500e

netapp hci_baseboard_management_controllerMatchh500s

netapp hci_baseboard_management_controllerMatchh700e

netapp hci_baseboard_management_controllerMatchh700s

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in kernel 5.14 rc2"
      }
    ]
  }
]

Source	Link
cloud	www.cloud.google.com/anthos/clusters/docs/security-bulletins
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/
security	www.security.netapp.com/advisory/ntap-20220225-0004/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Feb 2022 23:15Current

8.1High risk

Vulners AI Score8.1

CVSS38.8

EPSS0.000

CWE-416