CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability

KEV

Analyzed

AliasesSUSE-SU-2022:0991-1SUSE-SU-2022:1036-1RHSA-2022:4642+6 more

Published 03-03-2022Last modified 03-06-2026

Vulnerability summary

CVE-2022-0492 is a high (CVSS 7.8) Improper Authentication vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 02-06-2026. EPSS estimates a 5.53% chance of exploitation in the next 30 days, higher than 92.8% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (02-06-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

5.53%

0%100%

Low · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, metasploit

Advisory lineage

Upstream 0 · Downstream 55 · Related 30

DLA-2940-1 DLA-2941-1 DSA-5095-1 DSA-5096-1 LSN-0085-1 LSN-0086-1+49 more

Timeline

03-03-2022
PublishedVulnerability first disclosed.
02-06-2026
Added to CISA KEVExploitedLinux Kernel Improper Authentication Vulnerability
03-06-2026
Last modifiedVulnerability information updated.
05-06-2026
CISA remediation dueDeadline passedApply mitigations per vendor instructions.

Description

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.17.8v2.06.9

EPSS trend

Probability

5.53%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

No change 0.00 pp

From 5.53% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 02-06-2026
Federal due date: 05-06-2026

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. www.kernel.org nvd.nist.gov/vuln/detail/CVE-2022-0492

Public exploits

2 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
MetasploitremoteVerified
Docker cgroups Container Escape
exploit/linux/local/docker_cgroup_escape
Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat92 products

codeready_linux_builder8.0 | 8.2
codeready_linux_builder_for_power_little_endian8.0 | 8.2
enterprise_linux8.0
enterprise_linux_eus8.2
enterprise_linux_for_ibm_z_systems8.0

enterprise_linux_for_ibm_z_systems_eus8.0
enterprise_linux_for_power_little_endian8.0
enterprise_linux_for_power_little_endian_eus8.0
enterprise_linux_for_real_time_for_nfv_tus8.0 | 8.2
enterprise_linux_for_real_time_tus8.0 | 8.2
enterprise_linux_server_aus8.2
enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.1 | 8.2
enterprise_linux_server_tus8.2
enterprise_linux_server_update_services_for_sap_solutions8.1 | 8.2
virtualization_host4.0
bpftool< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
bpftool-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-abi-whitelists< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-bootwrapper< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debug< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debug-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debug-devel< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debuginfo-common-ppc64< 0:3.10.0-1160.66.1.el7
kernel-debuginfo-common-ppc64le< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-debuginfo-common-s390x< 0:3.10.0-1160.66.1.el7
kernel-debuginfo-common-x86_64< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-devel< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-doc< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-kdump< 0:3.10.0-1160.66.1.el7
kernel-kdump-debuginfo< 0:3.10.0-1160.66.1.el7
kernel-kdump-devel< 0:3.10.0-1160.66.1.el7
kernel-rt< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debug< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debug-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debug-devel< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debug-kvm< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debug-kvm-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-debuginfo-common-x86_64< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-devel< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-doc< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-kvm< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-kvm-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-trace< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-trace-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-trace-devel< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-trace-kvm< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-rt-trace-kvm-debuginfo< 0:3.10.0-1160.66.1.rt56.1207.el7
kernel-tools< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-tools-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-tools-libs< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kernel-tools-libs-devel< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
kpatch-patch-3_10_0-1062_51_1< 0:1-7.el7
kpatch-patch-3_10_0-1062_51_1-debuginfo< 0:1-7.el7
kpatch-patch-3_10_0-1062_52_2< 0:1-6.el7
kpatch-patch-3_10_0-1062_52_2-debuginfo< 0:1-6.el7
kpatch-patch-3_10_0-1062_56_1< 0:1-5.el7
kpatch-patch-3_10_0-1062_56_1-debuginfo< 0:1-5.el7
kpatch-patch-3_10_0-1062_59_1< 0:1-3.el7
kpatch-patch-3_10_0-1062_59_1-debuginfo< 0:1-3.el7
kpatch-patch-3_10_0-1062_60_1< 0:1-3.el7
kpatch-patch-3_10_0-1062_60_1-debuginfo< 0:1-3.el7
kpatch-patch-3_10_0-1062_61_1< 0:1-3.el7
kpatch-patch-3_10_0-1062_61_1-debuginfo< 0:1-3.el7
kpatch-patch-3_10_0-1062_63_1< 0:1-2.el7
kpatch-patch-3_10_0-1062_63_1-debuginfo< 0:1-2.el7
kpatch-patch-3_10_0-1062_66_1< 0:1-1.el7
kpatch-patch-3_10_0-1062_66_1-debuginfo< 0:1-1.el7
kpatch-patch-3_10_0-1160_31_1< 0:1-8.el7
kpatch-patch-3_10_0-1160_31_1-debuginfo< 0:1-8.el7
kpatch-patch-3_10_0-1160_36_2< 0:1-7.el7
kpatch-patch-3_10_0-1160_36_2-debuginfo< 0:1-7.el7
kpatch-patch-3_10_0-1160_41_1< 0:1-6.el7
kpatch-patch-3_10_0-1160_41_1-debuginfo< 0:1-6.el7
kpatch-patch-3_10_0-1160_42_2< 0:1-5.el7
kpatch-patch-3_10_0-1160_42_2-debuginfo< 0:1-5.el7
kpatch-patch-3_10_0-1160_45_1< 0:1-4.el7
kpatch-patch-3_10_0-1160_45_1-debuginfo< 0:1-4.el7
kpatch-patch-3_10_0-1160_49_1< 0:1-3.el7
kpatch-patch-3_10_0-1160_49_1-debuginfo< 0:1-3.el7
kpatch-patch-3_10_0-1160_53_1< 0:1-3.el7
kpatch-patch-3_10_0-1160_53_1-debuginfo< 0:1-3.el7
kpatch-patch-3_10_0-1160_59_1< 0:1-2.el7
kpatch-patch-3_10_0-1160_59_1-debuginfo< 0:1-2.el7
kpatch-patch-3_10_0-1160_62_1< 0:1-1.el7
kpatch-patch-3_10_0-1160_62_1-debuginfo< 0:1-1.el7
perf< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
perf-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
python-perf< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7
python-perf-debuginfo< 0:3.10.0-1160.66.1.el7 | < 0:3.10.0-1062.67.1.el7

Show all 92

Ubuntu69 products

linuxAll versions (No fix recorded) | < 4.4.0-222.255 | < 4.15.0-173.182 | < 5.4.0-105.119
linux-aws< 4.4.0-1102.107 | < 4.4.0-1138.152 | < 4.15.0-1124.133 | < 5.4.0-1069.73
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)
linux-aws-5.13< 5.13.0-1019.21~20.04.1

linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1069.73~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-fips< 4.15.0-2064.67 | All versions (No fix recorded) | < 5.4.0-1069.73+fips2
linux-aws-hwe< 4.15.0-1124.133~16.04.1
linux-azure< 4.15.0-1134.147~14.04.1 | < 4.15.0-1134.147~16.04.1 | All versions (No fix recorded) | < 5.4.0-1073.76
linux-azure-4.15< 4.15.0-1134.147
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13< 5.13.0-1021.24~20.04.1
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1073.76~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fips< 4.15.0-2046.50 | All versions (No fix recorded) | < 5.4.0-1073.76+fips1
linux-bluefield< 5.4.0-1032.35
linux-dell300x< 4.15.0-1038.43
linux-fips< 4.4.0-1072.78 | All versions (No fix recorded) | < 4.15.0-1081.90 | < 5.4.0-1046.52
linux-gcp< 4.15.0-1119.133~16.04.1 | All versions (No fix recorded) | < 5.4.0-1068.72
linux-gcp-4.15< 4.15.0-1119.133
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13< 5.13.0-1021.25~20.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1068.72~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-fips< 4.15.0-2029.32 | All versions (No fix recorded) | < 5.4.0-1067.71~20.04.1
linux-gke< 5.4.0-1066.69
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.4< 5.4.0-1066.69~18.04.1
linux-gkeop< 5.4.0-1037.38
linux-gkeop-5.4< 5.4.0-1037.38~18.04.1
linux-hwe< 4.15.0-173.182~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13< 5.13.0-37.42~20.04.1
linux-hwe-5.4< 5.4.0-105.119~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1018.20
linux-ibm-5.4< 5.4.0-1018.20~18.04.1
linux-intel-5.13< 5.13.0-1010.10
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-intel-iotg-5.15< 5.15.0-1008.11~20.04.1
linux-kvm< 4.4.0-1103.112 | < 4.15.0-1110.113 | < 5.4.0-1059.62
linux-lts-xenial< 4.4.0-222.255~14.04.1
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14< 5.14.0-1024.26
linux-oem-5.6All versions (No fix recorded)
linux-oracle< 4.15.0-1090.99~16.04.1 | < 4.15.0-1090.99 | < 5.4.0-1067.72
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13< 5.13.0-1025.30~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1067.72~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1056.63
linux-raspi-5.4< 5.4.0-1056.63~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2< 4.15.0-1106.113 | All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded)
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-snapdragon< 4.15.0-1123.132

Show all 69

Suse14 products

kernel-livepatch-SLE15_Update_27&distro=SUSE Linux Enterprise Live Patching 15< 2-150000.2.1
kernel-livepatch-SLE15-SP1_Update_28&distro=SUSE Linux Enterprise Live Patching 15 SP1< 2-150100.2.1
kernel-livepatch-SLE15-SP2_Update_17&distro=SUSE Linux Enterprise Live Patching 15 SP2< 10-150200.2.1
kernel-livepatch-SLE15-SP2_Update_18&distro=SUSE Linux Enterprise Live Patching 15 SP2< 9-150200.2.1
kernel-livepatch-SLE15-SP2_Update_19&distro=SUSE Linux Enterprise Live Patching 15 SP2< 7-150200.2.1

Show all 14

Netapp8 products

Show all 8

Debian2 products

linux< 5.16.7-1
debian_linuxEOL9.0 | 10.0 | 11.0

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04 | 22.04

Fedoraproject1 product

fedoraEOL35

Linux1 product

linux_kernel≥ 2.6.24, < 4.9.301 | ≥ 4.10, < 4.14.266 | ≥ 4.15, < 4.19.229 | ≥ 4.20, < 5.4.177 | ≥ 5.5, < 5.10.97 | ≥ 5.11, < 5.15.20 | ≥ 5.16, < 5.16.6 | 5.17:rc1 | 5.17:rc2

8 vendors · 188 products