CVE-2011-1022
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group...
CVE-2011-1022 is a low vulnerability (CVSS 2.1) in Balbir Singh Libcgroup, published March 16, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in libcgroup 0.37.1-1.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.39%EPSS, 33rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.37.1-1libcgroup +19 more
Description
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libcgroupDebian:12 | before 0.37.1-1 | 0.37.1-1 |
libcgroupDebian:13 | before 0.37.1-1 | 0.37.1-1 |
libcgroupDebian:14 | before 0.37.1-1 | 0.37.1-1 |
libcgroupDebian:6.0 From an advisory covering 2 CVEs | before 0.36.2-3+squeeze1, plus listed versions 0.36.2-3 | 0.36.2-3+squeeze1 |
libcgroupRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-develRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-pamRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroupRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libcgroup-develRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-pamRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroupRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-pamRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-develRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroupRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-pamRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
libcgroup-develRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs | before 0:0.36.1-6.el6_0.1 | 0:0.36.1-6.el6_0.1 |
What each source reports
NVD Score used
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
CVE-2011-1022- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
CVE-2011-1022- Updated
- 2026-11-02
EUVDEUVD-2011-1039No score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
EUVD-2011-1039- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-669f-5h8c-h58mNo score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group...
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
GHSA-669f-5h8c-h58m- Updated
- 2026-11-02
OSVNo score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
CVE-2011-1022- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1022No score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
DEBIAN-CVE-2011-1022- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10391-1No score
libcgroup-devel-0.41-2.8 on GA media
These are all security issues fixed in the libcgroup-devel-0.41-2.8 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10391-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-1022No score
The cgre_receive_netlink_msg function in daemon/cgrulesengd.c in cgrulesengd in the Control Group Configuration Library (aka libcgroup or libcg) before 0.37.1 does not verify that netlink messages originated in the kernel, which allows local users to bypass intended resource restrictions via a crafted message.
- Record
UBUNTU-CVE-2011-1022- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2011/02/25/11
secunia.com/advisories/43758
bugs.debian.org/cgi-bin/bugreport.cgi?bug=615987
securitytracker.com/id?1025157
securityfocus.com/bid/46578
Show 32 moreShow less
sourceforge.net/projects/libcg/files/libcgroup/v0.37.1/libcgroup-0.37.1.tar.bz2/download
debian.org/security/2011/dsa-2193
lists.opensuse.org/opensuse-updates/2011-04/msg00027.html
lists.fedoraproject.org/pipermail/package-announce/2011-March/056683.html
vupen.com/english/advisories/2011/0679
bugzilla.redhat.com/show_bug.cgi?id=680409
redhat.com/support/errata/RHSA-2011-0320.html
nvd.nist.gov/vuln/detail/CVE-2011-1022
github.com/advisories/GHSA-669f-5h8c-h58m
security-tracker.debian.org/tracker/CVE-2011-1022
access.redhat.com/errata/RHSA-2011:0320
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0320.json
cve.org/CVERecord?id=CVE-2011-1006
ubuntu.com/security/CVE-2011-1022
suse.com/security/cve/CVE-2011-1006