CVE DATABASE / CVE-2022-0492

CVE-2022-0492

Linux Kernel Improper Authentication Vulnerability

CVSS 7.8 · HIGH ⚠ CISA KEV — ACTIVELY EXPLOITED

On the CISA KEV catalog

Confirmed exploited in the wild. Added 2026-06-02. Federal remediation due 2026-06-05.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Summary

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVSS 3.1 breakdown

Base score	7.8 (HIGH)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector	LOCAL
Attack complexity	LOW
Privileges required	LOW
User interaction	NONE
Scope	UNCHANGED
Confidentiality	HIGH
Integrity	HIGH
Availability	HIGH

Weakness type (CWE)

Affected products

Netapp h300s firmwareNetapp h300sNetapp h410c firmwareNetapp h410cNetapp h410s firmwareNetapp h410sNetapp h500s firmwareNetapp h500sNetapp h700s firmwareNetapp h700sNetapp hci compute node firmwareNetapp hci compute nodeLinux linux kernelDebian debian linuxRedhat codeready linux builderRedhat codeready linux builder for power little endianRedhat virtualization hostRedhat enterprise linuxRedhat enterprise linux eusRedhat enterprise linux for ibm z systems

Check this CVE live

Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.

References

Data: NIST NVD + CISA KEV. NVD last modified 2026-06-02. Always verify against the vendor advisory before acting.