CVE-2022-0492

7.8 HIGH CISA KEV - Actively Exploited
Published: March 03, 2022 Modified: June 03, 2026
View on NVD

Description

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
Source: secalert@redhat.com
Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
Source: secalert@redhat.com
Exploit VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=2051505
Source: secalert@redhat.com
Issue Tracking Patch Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
Source: secalert@redhat.com
Patch Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
Source: secalert@redhat.com
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
Source: secalert@redhat.com
Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20220419-0002/
Source: secalert@redhat.com
Third Party Advisory
https://www.debian.org/security/2022/dsa-5095
Source: secalert@redhat.com
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096
Source: secalert@redhat.com
Third Party Advisory
http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=2051505
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking Patch Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20220419-0002/
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://www.debian.org/security/2022/dsa-5095
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://www.debian.org/security/2022/dsa-5096
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

21 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.8 / 10.0
EPSS (Exploit Probability)
33.7%
97th percentile
Exploitation Status
Actively Exploited
Remediation due: 2026-06-05

Weaknesses (CWE)

CWE-287 CWE-862

Affected Vendors

redhat linux debian netapp fedoraproject canonical

Related CVEs

CVE-2026-9754 6.5
CVE-2026-9753 8.1
CVE-2026-9752 6.5
CVE-2026-9751 5.5
CVE-2026-9750 6.5