In CISA KEV7.8 HighCWE-287
CVE-2022-0492
Linux Kernel Improper Authentication Vulnerability
LinuxKernel
Status
- Exploited in the wild
- In CISA KEV since 2 Jun
- Vendor fix available
Federal deadlineFri 5 Jun, 23:59 UTC
Passed 141 days ago
CISA KEV · added 2 Jun
Exploit probabilityEPSSchecked 25 Oct
5.5%probability of exploitation in the next 30 days
Higher than 93% of scored CVEs
SeverityCVSS
7.8High
Description NVD
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 5 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 2 Jun · 19:21 UTC | CISA | CISA Flags Linux Kernel Flaw CVE-2022-0492 in KEV Catalogue |
| Wed 3 Jun · 03:11 UTC | SecurityOnline | CISA adds Linux kernel CVE-2022-0492 and Android flaw to KEV list |
| Wed 3 Jun · 03:30 UTC | CISA | CISA flags Linux Kernel bug CVE-2022-0492 in KEV catalogue |
| Wed 3 Jun · 11:29 UTC | Security Affairs | CISA Adds Critical Linux and Android Flaws to KEV Catalog |
| Wed 3 Jun · 12:06 UTC | SecurityWeek | CISA warns of active Linux kernel flaw enabling container escapes |
- CISA warns of active Linux kernel flaw enabling container escapesSecurityWeek
- CISA Adds Critical Linux and Android Flaws to KEV CatalogSecurity Affairs
- CISA flags Linux Kernel bug CVE-2022-0492 in KEV catalogueCISA · official notice
- CISA adds Linux kernel CVE-2022-0492 and Android flaw to KEV listSecurityOnline
- CISA Flags Linux Kernel Flaw CVE-2022-0492 in KEV CatalogueCISA · first in our coverage · official notice