Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 4 products
Escape #3: Kernel Exploit Container shares the host kernel. Old kernel → container escape CVEs: - CVE-2022-0847 (DirtyPipe) - CVE-2022-0185 (heap overflow) - CVE-2020-14386 (AF_PACKET) Prevention: Patch your host kernel. Always.
Post summary
The post lists container escape vulnerabilities tied to old Linux kernels and stresses that patching the host kernel is the recommended mitigation.
合わせて読みたいブログ。 https://cloud.google.com/blog/ja/products/containers-kubernetes/how-gvisor-protects-google-cloud-services-from-cve-2020-14386
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 9.0 | - | - |
| OS | fedoraproject | fedora | 33 | - | - |
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 5.9.0 | - | - |
| OS | linux | linux_kernel | 5.9.0 | - | - |
| OS | linux | linux_kernel | 5.9.0 | - | - |
| OS | opensuse | leap | 15.1 | - | - |