CVE-2022-0492

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Score
CVSS 3.1 7.8 High
Status
Analyzed - secalert@redhat.com
Published
2022-03-03
Last modified
2026-06-03
Known exploited (CISA KEV)
since 2026-06-02, action due 2026-06-05: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Weaknesses
CWE-287, CWE-862

Affected products

References

 
 
© AVABIS GmbH privacypolicy about