CVE-2021-4197 Privilege escalation in kernel

What is CVE-2021-4197?

CVE-2021-4197 is a high-severity vulnerability in Debian Debian Linux, published on 23 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.

Weakness: CWE-287

Which versions are affected by CVE-2021-4197?

It affects 9 products.

Products include Broadcom Brocade Fabric Operating System Firmware, Debian Debian Linux, Linux kernel, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware and 3 more.

How do I fix CVE-2021-4197?

Apply the vendor's patch.

Is CVE-2021-4197 being exploited?

There is no known exploitation of CVE-2021-4197 in the wild and no public exploit code.

Other vulnerabilities in Debian Debian Linux

• CVE-2023-27534 Path traversal in https://github.com/curl/curl High 8.8
• CVE-2023-27538 Auth bypass in https://github.com/curl/curl High 7.7
• CVE-2021-27218 Integer overflow in n/a High 7.5
• CVE-2021-27219 Integer overflow in n/a High 7.5
• CVE-2019-19044 Denial of service in n/a High 7.5

All Debian Debian Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• How this page is made

Also known as AZL-9141, DEBIAN-CVE-2021-4197, UBUNTU-CVE-2021-4197.