Security Advisory: CloudLinux CageFS Mount Escape
This is a security release for CloudLinux 7, CloudLinux 8. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Affected Versions
CageFS 7.4.1 and earlier
Patched Version
CageFS 7.4.3
Default Update CMD
yum update -y
Fix Commands
CloudLinux 9
yum update cagefs
/usr/sbin/cagefsctl --force-update
CloudLinux 8
yum update cagefs
/usr/sbin/cagefsctl --force-update
CloudLinux 7
yum update cagefs
/usr/sbin/cagefsctl --force-update
What this means under a SharedLicense license
Your SharedLicense license itself is not affected — this is a change in CloudLinux 7, CloudLinux 8 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System