CVE-2021-4154

Published: Feb 4, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.

Affected (14)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux, Virtualization · Netapp: Hci Baseboard Management Controller

1 product

2 products

1 product

Hci Baseboard Management Controller

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.1 to 5.4.134
Linux Linux Kernel	From 5.11 to 5.12.19
Linux Linux Kernel	From 5.13 to 5.13.4
Linux Linux Kernel	From 5.5 to 5.10.52
Linux Linux Kernel	Version 5.14 rc1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Virtualization	Version 4.0

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci Baseboard Management Controller	Version h300e
Netapp Hci Baseboard Management Controller	Version h300s
Netapp Hci Baseboard Management Controller	Version h410s
Netapp Hci Baseboard Management Controller	Version h500e
Netapp Hci Baseboard Management Controller	Version h500s
Netapp Hci Baseboard Management Controller	Version h700e
Netapp Hci Baseboard Management Controller	Version h700s