Skip to content
OpenAdvisories
Unscored USN-2451-1 1 CVE

cgmanager vulnerability

Published Jan 6, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Serge Hallyn discovered that cgmanager did not consistently enforce
proper nesting when modifying cgroup properties. A local attacker in a
privileged container could use this to set cgroup values for all cgroups.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS cgmanager 0.24-0ubuntu7.1

Vulnerabilities 1

  • Unscored —
    CVE-2014-1425

    cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgrou…

    cgmanager Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2014-1425