CVE-2021-4197

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
n/akernelLinux kernel 5.17-rc1

References

Timeline

Published
Mar 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-419718.8Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection wheCVE-2021-419726.5Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be CVE-2021-419736.5In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed tCVE-2021-419749.1Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary CVE-2021-419759.1TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files CVE-2021-419765.3Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder nCVE-2021-41986.1A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, AntiviCVE-2021-419878.1In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code CVE-2021-419887.8Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.CVE-2021-419897.8Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.CVE-2021-41997.8Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender TotaCVE-2021-419907.5The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example,
CVE-2021-4197: High severity, CVSS 7.8 | Vulnix