CVE-2021-4154

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.

• linux linux kernel (>= 5.1 < 5.4.134) • linux linux kernel (>= 5.5 < 5.10.52) • linux linux kernel (>= 5.11 < 5.12.19) • linux linux kernel (>= 5.13 < 5.13.4) • linux linux kernel 5.14 • redhat virtualization 4.0 • redhat enterprise linux 8.0 • netapp hci baseboard management controller h300e • netapp hci baseboard management controller h300s • netapp hci baseboard management controller h410s • netapp hci baseboard management controller h500e • netapp hci baseboard management controller h500s • netapp hci baseboard management controller h700e • netapp hci baseboard management controller h700s