Evil-DB LogoEvil-DB
← All CVEs

CVE-2022-0492

high · 7.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2026-06-02Remediation due 2026-06-05

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

7.8
CVSS
5.5%
EPSS (exploit prob.)
92nd
EPSS percentile
2022-03-03
Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287CWE-862

Affected products

VendorProductAffected versions
netapph300s_firmwareall versions
netapph300sall versions
netapph410c_firmwareall versions
netapph410call versions
netapph410s_firmwareall versions
netapph410sall versions
netapph500s_firmwareall versions
netapph500sall versions
netapph700s_firmwareall versions
netapph700sall versions
netappbootstrap_osall versions
netapphci_compute_nodeall versions
linuxlinux_kernel>= 2.6.24, < 4.9.301
linuxlinux_kernel>= 4.10, < 4.14.266
linuxlinux_kernel>= 4.15, < 4.19.229
linuxlinux_kernel>= 4.20, < 5.4.177
linuxlinux_kernel>= 5.5, < 5.10.97
linuxlinux_kernel>= 5.11, < 5.15.20
linuxlinux_kernel>= 5.16, < 5.16.6
linuxlinux_kernel5.17
linuxlinux_kernel5.17
debiandebian_linux9.0
debiandebian_linux10.0
debiandebian_linux11.0
redhatcodeready_linux_builder8.0
redhatcodeready_linux_builder8.2
redhatcodeready_linux_builder_for_power_little_endian8.0
redhatcodeready_linux_builder_for_power_little_endian8.2
redhatvirtualization_host4.0
redhatenterprise_linux8.0
redhatenterprise_linux_eus8.2
redhatenterprise_linux_for_ibm_z_systems8.0
redhatenterprise_linux_for_ibm_z_systems_eus8.0
redhatenterprise_linux_for_power_little_endian8.0
redhatenterprise_linux_for_power_little_endian_eus8.0
redhatenterprise_linux_for_real_time_for_nfv_tus8.0
redhatenterprise_linux_for_real_time_for_nfv_tus8.2
redhatenterprise_linux_for_real_time_tus8.0
redhatenterprise_linux_for_real_time_tus8.2
redhatenterprise_linux_server_aus8.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-0492