Main
Vulnerability Database
Exploits
ID:8241 - Exploit for Use-after-free in Linux kernel - CVE-2021-4154
ID:8241 - Exploit for Use-after-free in Linux kernel - CVE-2021-4154
Published: August 11, 2022
Vulnerability identifier: #VU59840
Vulnerability risk: Low
CVE-ID: CVE-2021-4154
CWE-ID: CWE-416
Exploitation vector: Local access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the cgroup1_parse_param() function in kernel/cgroup/cgroup-v1.c in Linux kernel's cgroup v1 parser. A local user can execute arbitrary code via the fsconfig syscall parameter leading to a container breakout.
Remediation
Install updates from vendor's website.