CVE-2021-4197
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
Published:Sep 12, 2021
Last Modified:Nov 21, 2024
EPS:Mar 23, 2022
EPSS Score:0.00014
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Broadcom
Product
Brocade Fabric Operating System Firmware
Broadcom
Brocade Fabric Operating System Firmware
Vendor
Debian
Product
Debian Linux
Debian
Debian Linux
Vendor
Linux
Product
Linux Kernel
Linux
Linux Kernel
Vendor
Netapp
Product
H300s
Netapp
H300s
Vendor
Netapp
Product
H300s Firmware
Netapp
H300s Firmware
Vendor
Netapp
Product
H410c
Netapp
H410c
Vendor
Netapp
Product
H410c Firmware
Netapp
H410c Firmware
Vendor
Netapp
Product
H410s
Netapp
H410s
Vendor
Netapp
Product
H410s Firmware
Netapp
H410s Firmware
Vendor
Netapp
Product
H500s
Netapp
H500s
Vendor
Netapp
Product
H500s Firmware
Netapp
H500s Firmware
Vendor
Netapp
Product
H700s
Netapp
H700s
Vendor
Netapp
Product
H700s Firmware
Netapp
H700s Firmware
Vendor
Oracle
Product
Communications Cloud Native Core Binding Support Function
Oracle
Communications Cloud Native Core Binding Support Function
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Vendor
Redhat
Product
Rhel Eus
Redhat
Rhel Eus
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
