What’s Vulnerable › Vulnerabilities
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2026-06-02
- EPSS: 5.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-03-03 · updated 2026-06-17
- Weakness: CWE-287
Description
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
Affected products
- Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 20.04, 22.04
- Debian Linux: 9.0, 10.0, 11.0
- Fedoraproject Fedora: 35
- Linux kernel: from 2.6.24 before 4.9.301; from 4.10 before 4.14.266; from 4.15 before 4.19.229; from 4.20 before 5.4.177; from 5.5 before 5.10.97; from 5.11 before 5.15.20 — fixed in 4.14.266, 4.19.229, 4.9.301, 5.10.97, 5.15.20, 5.16.6
- NetApp Bootstrap Os: all versions
- NetApp H300S Firmware: all versions
- NetApp H410C Firmware: all versions
- NetApp H410S Firmware: all versions
- NetApp H500S Firmware: all versions
- NetApp H700S Firmware: all versions
- NetApp Solidfire, Enterprise Sds & Hci Storage Node: all versions
- NetApp Solidfire & Hci Management Node: all versions
- RedHat Codeready Linux Builder: 8.0, 8.2
- RedHat Codeready Linux Builder For Power Little Endian: 8.0, 8.2
- Red Hat Enterprise Linux: 8.0
- RedHat Enterprise Linux Eus: 8.2
- RedHat Enterprise Linux For Ibm Z Systems: 8.0
- RedHat Enterprise Linux For Ibm Z Systems Eus: 8.0
- RedHat Enterprise Linux For Power Little Endian: 8.0
- RedHat Enterprise Linux For Power Little Endian Eus: 8.0
- RedHat Enterprise Linux For Real Time For Nfv Tus: 8.0, 8.2
- RedHat Enterprise Linux For Real Time Tus: 8.0, 8.2
- RedHat Enterprise Linux Server Aus: 8.2
- RedHat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions: 8.1, 8.2
- RedHat Enterprise Linux Server Tus: 8.2
- RedHat Enterprise Linux Server Update Services For Sap Solutions: 8.1, 8.2
- RedHat Virtualization Host: 4.0
How to fix
Upgrade to a fixed version: Linux kernel 4.14.266, 4.19.229, 4.9.301, 5.10.97. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
- http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2051505
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
- https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
- https://security.netapp.com/advisory/ntap-20220419-0002/
- https://www.debian.org/security/2022/dsa-5095
- https://www.debian.org/security/2022/dsa-5096
- http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
Get alerted when CVE-2022-0492 or the next vulnerability affects your stack