CVE-2011-1022 json
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or l…
published 2011-03-22 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-1039
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 32%
- public exploits
- 0
- none known
Summary
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
Patch / fix
- libcgroup Debian 14, Debian 13, Debian 12 0.37.1-1
debian advisories DEBIAN-CVE-2011-1022
- libcgroup RHEL 6 0.36.1-6.el6_0.1
- libcgroup-pam RHEL 6 0.36.1-6.el6_0.1
red hat advisories RHSA-2011:0320
- openwall.com/lists/oss-security/2011/02/25/11 patch
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987 patch
- sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.ta… patch
- sourceforge.net/mailarchive/message.php?msg_id=26598749 patch
- bugzilla.redhat.com/show_bug.cgi?id=680409 patch
- openwall.com/lists/oss-security/2011/02/25/12 patch
- openwall.com/lists/oss-security/2011/02/25/6 patch
- openwall.com/lists/oss-security/2011/02/25/9 patch
- sourceforge.net/mailarchive/message.php?msg_id=27102603 patch
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2011-1022 updated cvss 3.3
libcgroup: Uncheck origin of NETLINK messages
-
Red Hat Enterprise Linux Desktop (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux Desktop Optional (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux HPC Node (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux HPC Node Optional (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux Server (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux Server Optional (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1fixed: vendor fix RHSA-2011:0320
+2 more productsfewer
Red Hat Enterprise Linux Workstation (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1 Red Hat Enterprise Linux Workstation Optional (v. 6) libcgroup 0.36.1-6.el6_0.1, libcgroup-pam 0.36.1-6.el6_0.1
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.39% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
openwall.com
/lists/oss-security/2011/02/25/11
mailing-list, patch
-
bugs.debian.org
/cgi-bin/bugreport.cgi?bug=615987
patch
-
sourceforge.net
/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download
patch
-
sourceforge.net
/mailarchive/message.php?msg_id=26598749
mailing-list, patch
-
bugzilla.redhat.com
/show_bug.cgi?id=680409
patch
-
openwall.com
/lists/oss-security/2011/02/25/12
mailing-list, patch
-
openwall.com
/lists/oss-security/2011/02/25/6
mailing-list, patch
-
openwall.com
/lists/oss-security/2011/02/25/9
mailing-list, patch
-
sourceforge.net
/mailarchive/message.php?msg_id=27102603
mailing-list, patch
-
debian.org
/security/2011/dsa-2193
vendor-advisory
-
lists.opensuse.org
/opensuse-updates/2011-04/msg00027.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2011-March/056683.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2011-0320.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2011-March/056734.html
vendor-advisory
-
secunia.com
/advisories/43758
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2011/0679
vdb-entry, vendor-advisory
-
secunia.com
/advisories/43611
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/44093
third-party-advisory
-
securitytracker.com
/id?1025157
vdb-entry
-
securityfocus.com
/bid/46578
vdb-entry
-
secunia.com
/advisories/43891
third-party-advisory
-
vupen.com
/english/advisories/2011/0774
vdb-entry
-
openwall.com
/lists/oss-security/2011/02/25/14
mailing-list
Sources
- CVE List CVE-2011-1022
- NVD CVE-2011-1022
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.