CVE-2011-1022

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-22 · updated 2026-06-16
Weakness: CWE-264

Description

The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.

Affected products

Balbir Singh Libcgroup: through 0.37; 0.1b, 0.1c, 0.2, 0.3, 0.31, 0.32 (+10)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056734.html
http://lists.opensuse.org/opensuse-updates/2011-04/msg00027.html
http://openwall.com/lists/oss-security/2011/02/25/11
http://openwall.com/lists/oss-security/2011/02/25/12
http://openwall.com/lists/oss-security/2011/02/25/14
http://openwall.com/lists/oss-security/2011/02/25/6
http://openwall.com/lists/oss-security/2011/02/25/9
http://secunia.com/advisories/43611
http://secunia.com/advisories/43758
http://secunia.com/advisories/43891

Get alerted when CVE-2011-1022 or the next vulnerability affects your stack