CVE-2021-4197
First published: Sun Sep 12 2021(Updated: )
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel-rt | <0:4.18.0-372.9.1.rt7.166.el8 | 0:4.18.0-372.9.1.rt7.166.el8 |
| redhat/kernel | <0:4.18.0-372.9.1.el8 | 0:4.18.0-372.9.1.el8 |
| redhat/kernel-rt | <0:4.18.0-305.57.1.rt7.129.el8_4 | 0:4.18.0-305.57.1.rt7.129.el8_4 |
| redhat/kernel | <0:4.18.0-305.57.1.el8_4 | 0:4.18.0-305.57.1.el8_4 |
| redhat/Linux kernel | <5.17 | 5.17 |
| Linux Linux kernel | >=4.2<4.14.276 | |
| Linux Linux kernel | >=4.15<4.19.238 | |
| Linux Linux kernel | >=4.20<5.4.189 | |
| Linux Linux kernel | >=5.5<5.10.111 | |
| Linux Linux kernel | >=5.11<5.15.14 | |
| Oracle Communications Cloud Native Core Binding Support Function | =22.1.1 | |
| Oracle Communications Cloud Native Core Binding Support Function | =22.1.3 | |
| Oracle Communications Cloud Native Core Binding Support Function | =22.2.0 | |
| Debian Debian Linux | =10.0 | |
| Broadcom Brocade Fabric Operating System Firmware | ||
| Netapp H300s Firmware | ||
| Netapp H300s | ||
| Netapp H500s Firmware | ||
| Netapp H500s | ||
| Netapp H700s Firmware | ||
| Netapp H700s | ||
| Netapp H410s Firmware | ||
| Netapp H410s | ||
| Netapp H410c Firmware | ||
| Netapp H410c | ||
| All of | ||
| Netapp H300s Firmware | ||
| Netapp H300s | ||
| All of | ||
| Netapp H500s Firmware | ||
| Netapp H500s | ||
| All of | ||
| Netapp H700s Firmware | ||
| Netapp H700s | ||
| All of | ||
| Netapp H410s Firmware | ||
| Netapp H410s | ||
| All of | ||
| Netapp H410c Firmware | ||
| Netapp H410c | ||
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.12.6-1 |
Remedy
The mitigation not known. However, for the default configuration of the Red Hat Enterprise Linux it is not possible to trigger this vulnerability: if control groups (cgroups) not being used or being used with the default configuration or being used some other configuration where for example similar privileges for all processes (both for parent and for child processes), then no way to trigger this vulnerability.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2021-4197 https://nvd.nist.gov/vuln/detail/CVE-2021-4197 https://lore.kernel.org/lkml/20211209214707.805617-1-tj@kernel.org/T/
- https://bugzilla.redhat.com/show_bug.cgi?id=2035652
- https://access.redhat.com/errata/RHSA-2022:1975
- https://access.redhat.com/errata/RHSA-2022:1988
- https://access.redhat.com/errata/RHSA-2022:5633
- https://access.redhat.com/errata/RHSA-2022:5626
- https://access.redhat.com/security/cve/cve-2021-4197
- https://lore.kernel.org/lkml/20211209214707.805617-1-tj@kernel.org/T/
- https://www.debian.org/security/2022/dsa-5127
- https://security.netapp.com/advisory/ntap-20220602-0006/
- https://www.debian.org/security/2022/dsa-5173
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://launchpad.net/bugs/cve/CVE-2021-4197
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2035668
- https://lore.kernel.org/lkml/20211209214707.805617-1-tj%40kernel.org/T/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4197
- https://nvd.nist.gov/vuln/detail/CVE-2021-4197
- https://security-tracker.debian.org/tracker/CVE-2021-4197
- https://ubuntu.com/security/CVE-2021-4197
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/weakness
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-4197
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- collector/nvd-cve
- source/NVD
- collector/security-tracker-debian
- source/Debian
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/softwarecombine
- agent/event
- agent/trending
- package-manager/redhat
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/4.2
- version/linux linux kernel/4.15
- version/linux linux kernel/4.20
- version/linux linux kernel/5.5
- version/linux linux kernel/5.11
- vendor/oracle
- canonical/oracle communications cloud native core binding support function
- version/oracle communications cloud native core binding support function/22.1.1
- version/oracle communications cloud native core binding support function/22.1.3
- version/oracle communications cloud native core binding support function/22.2.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- vendor/broadcom
- canonical/broadcom brocade fabric operating system firmware
- vendor/netapp
- canonical/netapp h300s firmware
- canonical/netapp h300s
- canonical/netapp h500s firmware
- canonical/netapp h500s
- canonical/netapp h700s firmware
- canonical/netapp h700s
- canonical/netapp h410s firmware
- canonical/netapp h410s
- canonical/netapp h410c firmware
- canonical/netapp h410c
- package-manager/debian