vendor:
N/A
by:
Anonymous
7.2
CVSS
HIGH
Cgroup Privilege Escalation
269
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Linux
2020
On the host
This exploit allows an attacker to gain root privileges on a Linux system by exploiting a vulnerability in the cgroup subsystem. The exploit involves creating a cgroup, mounting it, and then writing a malicious script to the cgroup's release_agent file. The malicious script is then executed when the cgroup is released, allowing the attacker to gain root privileges.
Mitigation:
The best way to mitigate this vulnerability is to ensure that the cgroup subsystem is properly configured and that the release_agent file is not writable by unprivileged users.
