CVE-2022-0492NVD

Vulnerability Summary

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Severity Level

HIGH(7.8)

Published Date

Mar 3, 2022

Last Modified

Jun 3, 2026

PoC

Available(Metasploit)

Exploitation Status

ACTIVE

EPSS Score (30-Day)

5.53%Probability

Root Weakness (CWE)

CWE-287: Improper Authentication ↗

When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

CWE-862: Missing Authorization ↗

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVSS v3.1 Base Metrics — Score 7.8 (HIGH)

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Affected & Patched Versions

Affected Versions

Netapp H300s Firmware
Netapp H410c Firmware
Netapp H410s Firmware
Netapp H500s Firmware
Netapp H700s Firmware
Netapp Bootstrap Os
Linux Linux Kernel >= 2.6.24 and < 4.9.301
Linux Linux Kernel >= 4.10 and < 4.14.266
Linux Linux Kernel >= 4.15 and < 4.19.229
Linux Linux Kernel >= 4.20 and < 5.4.177
Linux Linux Kernel >= 5.5 and < 5.10.97
Linux Linux Kernel >= 5.11 and < 5.15.20
Linux Linux Kernel >= 5.16 and < 5.16.6
Linux Linux Kernel
Debian Debian Linux
Redhat Codeready Linux Builder
Redhat Codeready Linux Builder For Power Little Endian
Redhat Virtualization Host
Redhat Enterprise Linux
Redhat Enterprise Linux Eus
Redhat Enterprise Linux For Ibm Z Systems
Redhat Enterprise Linux For Ibm Z Systems Eus
Redhat Enterprise Linux For Power Little Endian
Redhat Enterprise Linux For Power Little Endian Eus
Redhat Enterprise Linux For Real Time For Nfv Tus
Redhat Enterprise Linux For Real Time Tus
Redhat Enterprise Linux Server Aus
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Redhat Enterprise Linux Server Tus
Redhat Enterprise Linux Server Update Services For Sap Solutions
Canonical Ubuntu Linux
Fedoraproject Fedora
Netapp Solidfire\, Enterprise Sds \& Hci Storage Node
Netapp Solidfire \& Hci Management Node

Patched Versions

Linux Linux Kernel 4.9.301
Linux Linux Kernel 4.14.266
Linux Linux Kernel 4.19.229
Linux Linux Kernel 5.4.177
Linux Linux Kernel 5.10.97
Linux Linux Kernel 5.15.20
Linux Linux Kernel 5.16.6

🎁7-Day Free Trial — Try Pro or Team, no card required.

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

📈EPSS Spike Alerts — Catch rising risk before it peaks.

🎯Custom EPSS/CVSS — Filter noise, focus on risk.

🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.

🐙GitHub Issues — Auto-tracked, no duplicates.

📬Weekly Digest — One clean summary, not inbox spam.

🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).

💬Webhooks — Slack & Teams integration.

🔀Smart Routing — Critical alerts to one channel, rest to another.

🚫Ad-Free — Uninterrupted experience.