VDB

GCVE-110-MAGEIA-2022-117

GCVE-110-MAGEIA-2022-117
Advisory Published
Vulnetix · Advisory published March 28, 2022
Containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during 'execve(2)' (CVE-2022-24769)

Affected Products

VendorProductVersionsPlatforms
Mageiaradeon-firmware0 (affected), 20220815-1.mga8.nonfree (unaffected)—
Mageiakernel-firmware-nonfree0 (affected), 20220815-1.mga8.nonfree (unaffected)—
Mageiadocker0 (affected), 20.10.14-3.mga8 (unaffected), 0 (affected), 20.10.14-3.mga8 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›