Security restrictions bypass in Linux kernel - CVE-2021-4197

Vulnerability identifier: #VU61258

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-4197

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to missing permissions checks within the cgroups (control groups) functionality of Linux Kernel when writing into a file descriptor. A local low privileged process can trick a higher privileged parent process into writing arbitrary data into files, which can result in denial of service or privileges escalation.

Linux kernel
Amazon Linux AMI
Debian Linux
SUSE Linux Enterprise Micro
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service
Ubuntu
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Public Cloud
openEuler
Fedora
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat Advanced Cluster Management for Kubernetes
IBM Cloud Object Storage Systems
IBM Elastic Storage System
IBM Spectrum Protect Plus
kernel (Red Hat package)
kernel-rt (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
linux-image-lowlatency (Ubuntu package)
linux-image-4.4.0-1145-aws (Ubuntu package)
linux-image-4.4.0-229-generic (Ubuntu package)
linux-image-4.4.0-229-lowlatency (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-4.4.0-1110-kvm (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-4.4.0-1109-aws (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-4.15.0-189-lowlatency (Ubuntu package)
linux-image-4.15.0-189-generic (Ubuntu package)
linux-image-4.15.0-189-generic-lpae (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1102-oracle (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1115-raspi2 (Ubuntu package)
linux-image-4.15.0-1123-kvm (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1131-gcp (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1133-snapdragon (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1137-aws (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1146-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
kernel-abi-stablelists
kernel-doc
bpftool
kernel-tools-libs
kernel-tools
kernel-modules-extra
perf
python3-perf
kernel-modules
kernel-headers
kernel-devel
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
kernel-source
perf-debuginfo
kernel-debugsource
bpftool-debuginfo
kernel-tools-debuginfo
python2-perf
kernel-tools-devel
python3-perf-debuginfo
kernel-debuginfo
python2-perf-debuginfo
kernel-tools-libs-devel
kernel-modules-internal
linux (Debian package)
kernel-rt_debug-devel
cluster-md-kmp-rt
cluster-md-kmp-rt-debuginfo
dlm-kmp-rt
dlm-kmp-rt-debuginfo
gfs2-kmp-rt
gfs2-kmp-rt-debuginfo
kernel-rt
kernel-rt-debuginfo
kernel-rt-debugsource
kernel-rt-devel
kernel-rt-devel-debuginfo
kernel-rt_debug
kernel-rt_debug-debuginfo
kernel-rt_debug-debugsource
kernel-rt_debug-devel-debuginfo
kernel-syms-rt
ocfs2-kmp-rt
ocfs2-kmp-rt-debuginfo
kernel-devel-rt
kernel-source-rt
kernel-syms-azure
kernel-devel-azure
kernel-source-azure
kernel-azure
kernel-azure-debuginfo
kernel-azure-debugsource
kernel-azure-devel
kernel-azure-devel-debuginfo
linux-image-oem-osp1 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-5.4.0-117-generic (Ubuntu package)
linux-image-5.4.0-117-lowlatency (Ubuntu package)
linux-image-5.4.0-117-generic-lpae (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.4.0-1026-ibm (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-5.4.0-1046-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1065-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1074-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1076-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1078-aws (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1083-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-5.13.0-37-generic (Ubuntu package)
linux-image-5.13.0-37-generic-64k (Ubuntu package)
linux-image-5.13.0-37-lowlatency (Ubuntu package)
linux-image-5.13.0-37-generic-lpae (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.13.0-1018-kvm (Ubuntu package)
linux-image-5.13.0-1019-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.13.0-1021-azure (Ubuntu package)
linux-image-5.13.0-1021-gcp (Ubuntu package)
linux-image-5.13.0-1022-raspi (Ubuntu package)
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.13.0-1023-oracle (Ubuntu package)
linux-image-5.13.0-1025-oracle (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-5.14.0-1022-oem (Ubuntu package)
linux-image-5.4.0-1068-kvm (Ubuntu package)
linux-image-5.4.0-1078-gcp (Ubuntu package)
linux-image-5.4.0-1083-azure-fde (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 5.17 rc1
Migration Toolkit for Containers - addressed in versions 1.6.5, 1.7.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.11, 2.4.5, 2.5.0
IBM Cloud Object Storage Systems - update to 3.16.7.63
Red Hat OpenShift Container Platform - addressed in versions 4.7.56, 4.9.45, 4.10.25
kernel (Red Hat package) - addressed in versions 4.18.0-305.57.1.el8_4, 4.18.0-372.9.1.el8
kernel-rt (Red Hat package) - addressed in versions 4.18.0-305.57.1.rt7.129.el8_4, 4.18.0-372.9.1.rt7.166.el8
IBM Elastic Storage System - update to 6.1.4.0
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.15.0.189.174, 5.4.0.117.120, 5.13.0.37.46
linux-image-4.4.0-1145-aws (Ubuntu package) - update to 4.4.0.229.235
linux-image-4.4.0-229-generic (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.4.0.1110.107
linux-image-4.4.0-229-lowlatency (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.4.0.1110.107
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.4.01109.115, 5.4.0.1078.59, 5.13.0.1019.20, 5.13.0.1019.21~20.04.12
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.15.0.189.174, 5.4.0.117.120, 5.13.0.37.46
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.229.235, 4.15.0.189.174, 5.4.0.117.120, 5.13.0.37.46
linux-image-4.4.0-1110-kvm (Ubuntu package) - update to 4.4.0.1110.107
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.1110.107
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.1110.107
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.1110.107, 4.15.0.1123.116, 5.4.0.1068.66, 5.13.0.1018.18
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.1110.107
linux-image-4.4.0-1109-aws (Ubuntu package) - update to 4.4.01109.115
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.189.174
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.189.174
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.189.174
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.189.174, 5.4.0.117.120, 5.13.0.37.46
linux-image-4.15.0-189-lowlatency (Ubuntu package) - update to 4.15.0-189.200
linux-image-4.15.0-189-generic (Ubuntu package) - update to 4.15.0-189.200
linux-image-4.15.0-189-generic-lpae (Ubuntu package) - update to 4.15.0-189.200
linux-image-aws-hwe (Ubuntu package) - update to 4.15.0.1099.92
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1102.109
linux-image-4.15.0-1102-oracle (Ubuntu package) - update to 4.15.0-1102.113
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1115.112, 5.4.0.1065.98
linux-image-4.15.0-1115-raspi2 (Ubuntu package) - update to 4.15.0-1115.123
linux-image-4.15.0-1123-kvm (Ubuntu package) - update to 4.15.0-1123.128
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1131.147
linux-image-4.15.0-1131-gcp (Ubuntu package) - update to 4.15.0-1131.147
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1133.134
linux-image-4.15.0-1133-snapdragon (Ubuntu package) - update to 4.15.0-1133.143
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1137.137
linux-image-4.15.0-1137-aws (Ubuntu package) - update to 4.15.0-1137.148
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1146.116
linux-image-4.15.0-1146-azure (Ubuntu package) - addressed in versions 4.15.0.1146.133, 4.15.0-1146.161
linux-image-azure (Ubuntu package) - addressed in versions 4.15.0.1146.133, 5.4.0.1083.61, 5.4.0.1086.63, 5.13.0.1021.24~20.04.10
kernel-abi-stablelists - update to 4.18.0-372.9.1
kernel-doc - update to 4.18.0-372.9.1
bpftool - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-tools-libs - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-tools - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
perf - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
python3-perf - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-headers - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-debug-modules-extra - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-debug-modules - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-debug-devel - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-debug-core - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-debug - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel-cross-headers - update to 4.18.0-372.9.1
kernel-core - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel - addressed in versions 4.18.0-372.9.1, 4.19.91-25.6
kernel - update to 4.19.90-2201.3.0.0134
kernel-source - update to 4.19.90-2201.3.0.0134
bpftool - update to 4.19.90-2201.3.0.0134
perf-debuginfo - update to 4.19.90-2201.3.0.0134
kernel-devel - update to 4.19.90-2201.3.0.0134
kernel-debugsource - update to 4.19.90-2201.3.0.0134
bpftool-debuginfo - update to 4.19.90-2201.3.0.0134
kernel-tools-debuginfo - update to 4.19.90-2201.3.0.0134
python2-perf - update to 4.19.90-2201.3.0.0134
kernel-tools-devel - update to 4.19.90-2201.3.0.0134
python3-perf-debuginfo - update to 4.19.90-2201.3.0.0134
kernel-debuginfo - update to 4.19.90-2201.3.0.0134
python3-perf - update to 4.19.90-2201.3.0.0134
perf - update to 4.19.90-2201.3.0.0134
kernel-tools - update to 4.19.90-2201.3.0.0134
python2-perf-debuginfo - update to 4.19.90-2201.3.0.0134
kernel-tools-libs-devel - update to 4.19.91-25.6
kernel-modules-internal - update to 4.19.91-25.6
linux (Debian package) - addressed in versions 4.19.249-2, 5.10.113-1
kernel-rt_debug-devel - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
cluster-md-kmp-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
cluster-md-kmp-rt-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
dlm-kmp-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
dlm-kmp-rt-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
gfs2-kmp-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
gfs2-kmp-rt-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt-debugsource - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt-devel - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt-devel-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt_debug - update to 5.3.18-68.1
kernel-rt_debug-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt_debug-debugsource - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-rt_debug-devel-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-syms-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
ocfs2-kmp-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
ocfs2-kmp-rt-debuginfo - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-devel-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-source-rt - addressed in versions 5.3.18-68.1, 5.3.18-150300.71.1
kernel-syms-azure - update to 5.3.18-150300.38.37.1
kernel-devel-azure - update to 5.3.18-150300.38.37.1
kernel-source-azure - update to 5.3.18-150300.38.37.1
kernel-azure - update to 5.3.18-150300.38.37.1
kernel-azure-debuginfo - update to 5.3.18-150300.38.37.1
kernel-azure-debugsource - update to 5.3.18-150300.38.37.1
kernel-azure-devel - update to 5.3.18-150300.38.37.1
kernel-azure-devel-debuginfo - update to 5.3.18-150300.38.37.1
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.117.120, 5.4.0.117.132~18.04.99
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.117.120, 5.4.0.117.132~18.04.99, 5.4.0.122.138~18.04.102
linux-image-5.4.0-117-generic (Ubuntu package) - addressed in versions 5.4.0-117.132, 5.4.0-117.132~18.04.1
linux-image-5.4.0-117-lowlatency (Ubuntu package) - addressed in versions 5.4.0-117.132, 5.4.0-117.132~18.04.1
linux-image-5.4.0-117-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-117.132, 5.4.0-117.132~18.04.1
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.117.132~18.04.99
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.117.132~18.04.99
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.117.132~18.04.99
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.117.132~18.04.99
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.117.132~18.04.99
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1026.24
linux-image-ibm (Ubuntu package) - addressed in versions 5.4.0.1026.24, 5.4.0.1026.41
linux-image-5.4.0-1026-ibm (Ubuntu package) - addressed in versions 5.4.0-1026.29, 5.4.0-1026.29~18.04.1
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1046.48
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1046.48, 5.4.0.1046.48~18.04.44
linux-image-5.4.0-1046-gkeop (Ubuntu package) - addressed in versions 5.4.0-1046.48, 5.4.0-1046.48~18.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1065.65
linux-image-5.4.0-1065-raspi (Ubuntu package) - addressed in versions 5.4.0-1065.75, 5.4.0-1065.75~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1065.98, 5.13.0.1022.27
linux-image-5.4.0-1068-kvm (Ubuntu package) - update to 5.4.0-1068.72
linux-image-5.4.0-1074-gke (Ubuntu package) - addressed in versions 5.4.0-1074.79, 5.4.0-1074.79~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1074.79~18.04.37, 5.4.0.1074.83
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1074.83, 5.13.0.1021.19
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1076.75
linux-image-5.4.0-1076-oracle (Ubuntu package) - addressed in versions 5.4.0-1076.83, 5.4.0-1076.83~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1076.83~18.04.54, 5.13.0.1023.23, 5.13.0.1025.30~20.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1078.79
linux-image-5.4.0-1078-aws (Ubuntu package) - addressed in versions 5.4.0-1078.84, 5.4.0-1078.84~18.04.1
linux-image-5.4.0-1078-gcp (Ubuntu package) - update to 5.4.0-1078.84
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1078.85
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1083.81
linux-image-5.4.0-1083-azure (Ubuntu package) - addressed in versions 5.4.0-1083.87, 5.4.0-1083.87~18.04.1
linux-image-5.4.0-1083-azure-fde (Ubuntu package) - update to 5.4.0-1083.87+cvm1.1
linux-image-azure-fde (Ubuntu package) - update to 5.4.0.1083.87+cvm1.24
linux-image-5.13.0-37-generic (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-64k (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-lowlatency (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-5.13.0-37-generic-lpae (Ubuntu package) - addressed in versions 5.13.0-37.42, 5.13.0-37.42~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.13.0.37.42~20.04.22
linux-image-generic-64k (Ubuntu package) - update to 5.13.0.37.46
linux-image-oem-20.04 (Ubuntu package) - update to 5.13.0.37.46
linux-image-5.13.0-1018-kvm (Ubuntu package) - update to 5.13.0-1018.19
linux-image-5.13.0-1019-aws (Ubuntu package) - addressed in versions 5.13.0-1019.21, 5.13.0-1019.21~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.13.0.1021.19, 5.13.0.1021.25~20.04.1
linux-image-5.13.0-1021-azure (Ubuntu package) - update to 5.13.0-1021.24~20.04.1
linux-image-5.13.0-1021-gcp (Ubuntu package) - addressed in versions 5.13.0-1021.25, 5.13.0-1021.25~20.04.1
linux-image-5.13.0-1022-raspi (Ubuntu package) - update to 5.13.0-1022.24
linux-image-5.13.0-1022-raspi-nolpae (Ubuntu package) - update to 5.13.0-1022.24
linux-image-raspi-nolpae (Ubuntu package) - update to 5.13.0.1022.27
linux-image-5.13.0-1023-oracle (Ubuntu package) - update to 5.13.0-1023.28
linux-image-5.13.0-1025-oracle (Ubuntu package) - update to 5.13.0-1025.30~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.14.0.1022.19
linux-image-5.14.0-1022-oem (Ubuntu package) - update to 5.14.0-1022.24
kernel - addressed in versions 5.15.14-100.fc34, 5.15.14-200.fc35
IBM Spectrum Protect Plus - update to 10.1.11

• https://bugzilla.redhat.com/show_bug.cgi?id=2035652

• Privilege escalation in Linux kernel cgroup
• Amazon Linux AMI update for kernel
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-azure-5.13
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Ubuntu update for linux
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC)
• Ubuntu update for linux-kvm
• Debian update for linux
• Ubuntu update for linux
• Ubuntu update for linux-aws
• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel-rt
• Red Hat Enterprise Linux 8.4 Extended Update Support update for kernel
• Ubuntu update for linux-azure
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Debian update for linux
• Multiple vulnerabilities in OpenShift Container Platform 4.9
• Multiple vulnerabilities in OpenShift Container Platform 4.7
• Multiple vulnerabilities in IBM Elastic Storage System
• Multiple vulnerabilities in IBM Cloud Object Storage Systems
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• SUSE update for the Linux Kernel
• openEuler update for kernel
• Multiple vulnerabilities in Migration Toolkit for Containers 1.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Ubuntu update for linux-oem-5.14
• Fedora 35 update for kernel
• Fedora 34 update for kernel
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Anolis OS update for kernel
• Anolis OS update for kernel