CVE catalog
CVE-2022-31214
firejail: CVE-2022-31214
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.39% · Oct 25, 2026
A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user namespace, the NO_NEW_PRIVS prctl is not activated, and the entered mount namespace is under the attacker's control. In this way, the filesystem layout can be adjusted to gain root privileges through execution of available setuid-root binaries such as su or sudo.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | firejail | sid | 0.9.80-2 | fixed |
| Debian | firejail | trixie | 0.9.74-1 | fixed |
| Debian | firejail | bookworm | 0.9.72-2 | fixed |
| Suse | firejail | package hub 15 sp3 | 0.9.70-bp153.2.6.1 | fixed |
| Opensuse | firejail | leap 15.3 | 0.9.70-bp153.2.6.1 | fixed |
| Suse | firejail | package hub 15 sp4 | 0.9.70-bp154.2.3.1 | fixed |
| Opensuse | firejail | leap 15.4 | 0.9.70-bp154.2.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | firejail | source | sid | 0.9.68-4 | not yet assigned | Not reported | [1012510] |
| Debian | firejail | source | trixie | 0.9.68-4 | not yet assigned | Not reported | [1012510] |
| Debian | firejail | source | bookworm | 0.9.68-4 | not yet assigned | Not reported | [1012510] |
| Suse | firejail | rpm | package hub 15 sp3 | 0.9.70-bp153.2.6.1 | Not reported | OPENSUSE-SU-2022:10015-1 | Not reported |
| Opensuse | firejail | rpm | leap 15.3 | 0.9.70-bp153.2.6.1 | Not reported | OPENSUSE-SU-2022:10015-1 | Not reported |
| Suse | firejail | rpm | package hub 15 sp4 | 0.9.70-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10016-1 | Not reported |
| Opensuse | firejail | rpm | leap 15.4 | 0.9.70-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10016-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [firejail]Fixed
Details (2)
0.9.72-2· amd64 · bookwormFixed · Fixed:
0.9.68-4dsa · firejail · debian · bookworm
0.9.72-2· arm64 · bookwormFixed · Fixed:
0.9.68-4dsa · firejail · debian · bookworm
- [firejail-profiles]Fixed
Source package: [firejail]
Details (2)
0.9.72-2· all · bookwormFixed · Fixed:
0.9.68-4dsa · firejail · debian · bookworm
0.9.72-2· all · bookwormFixed · Fixed:
0.9.68-4dsa · firejail · debian · bookworm
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10015-1.json]
- [https://osv.dev/vulnerability/DLA-3061-1]
- [https://osv.dev/vulnerability/DSA-5167-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2022:10015-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2022:10016-1]
- [https://security-tracker.debian.org/tracker/CVE-2022-31214]
- [https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-31214.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]