A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw under certain circumstances allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

🗓️ 16 Mar 2022 07:00:00Reported by MicrosoftType

Flaw in Linux kernel cgroup_release_agent_write enables privilege escalation and namespace bypass v1.

Reporter	Title	Published	Views	Family All 643
0day.today	Docker cgroups Container Escape Exploit	7 Dec 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Log4j 1.x	3 Aug 202216:43	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management	3 Jun 202210:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus	29 Jun 202223:37	–	ibm
GithubExploit	Exploit for Improper Authentication in Linux Linux_Kernel	18 Feb 202304:48	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Linux Linux_Kernel	28 Feb 202201:25	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Linux Linux_Kernel	11 Mar 202208:02	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Imagemagick	17 Nov 202217:24	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Linux Linux_Kernel	6 Mar 202210:57	–	githubexploit