High severity · published Mar 23, 2022
CVE-2021-4197
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process…
7.8
CVSS
0.5%
EPSS
No
On KEV
Description
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.2 before 4.14.276; 4.15 before 4.19.238; 4.20 before 5.4.189; 5.5 before 5.10.111; 5.11 before 5.15.14 · source: NVD
BF
Brocade Fabric Operating System Firmware · Broadcom
All versions, or not specified · source: NVD
CC
Communications Cloud Native Core Binding Support Function · Oracle
22.1.1; 22.1.3; 22.2.0 · source: NVD
DL
Debian Linux · Debian
10.0 · source: NVD
HF
H300s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410c Firmware · Netapp
All versions, or not specified · source: NVD
HF
H410s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H500s Firmware · Netapp
All versions, or not specified · source: NVD
HF
H700s Firmware · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-4197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-4197
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2035652
lore.kernel.org
https://lore.kernel.org/lkml/20211209214707.805617-1-tj%40kernel.org/T/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220602-0006/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5127
Third Party Advisory
https://www.debian.org/security/2022/dsa-5173
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability
