A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.16.7-1linux_5.16.7-1_all.deb
Debian11alllinux< 5.10.103-1linux_5.10.103-1_all.deb
Debian10alllinux< 4.19.232-1linux_4.19.232-1_all.deb
Debian999alllinux< 5.16.7-1linux_5.16.7-1_all.deb
Debian13alllinux< 5.16.7-1linux_5.16.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.16.7-1	linux_5.16.7-1_all.deb
Debian	11	all	linux	< 5.10.103-1	linux_5.10.103-1_all.deb
Debian	10	all	linux	< 4.19.232-1	linux_4.19.232-1_all.deb
Debian	999	all	linux	< 5.16.7-1	linux_5.16.7-1_all.deb
Debian	13	all	linux	< 5.16.7-1	linux_5.16.7-1_all.deb

nessus 93

f5 1

githubexploit 7

redhatcve 1

redhat 23

cbl_mariner 2

packetstorm 1

ubuntucve 1

cnvd 1

hivepro 1

oraclelinux 14

prion 1

photon 6

metasploit 1

virtuozzo 1

centos 1

veracode 1

redos 1

thn 1

cve 1

zdt 1

ubuntu 7

ics 1

ibm 1

mageia 2

cloudlinux 2

rocky 4

rapid7blog 1

threatpost 1

cloudfoundry 2

suse 3

osv 9

debian 1

slackware 1

almalinux 1

amazon 3

nessus

SUSE SLES12 Security Update : kernel (Live Patch 42 for SLE 12 SP3) (SUSE-SU-2022:1036-1)

2022-03-31 00:00:00

SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 19 for SLE 15 SP2) (SUSE-SU-2022:0991-1)

2022-03-30 00:00:00

F5 Networks BIG-IP : Linux kernel vulnerability (K54724312)

2022-05-25 00:00:00

K54724312 : Linux kernel vulnerability CVE-2022-0492

2022-05-25 00:00:00

githubexploit

Exploit for Missing Authorization in Linux Linux Kernel

2022-03-07 10:03:17

Exploit for Missing Authorization in Linux Linux Kernel

2022-05-09 13:20:03

Exploit for Missing Authorization in Linux Linux Kernel

2022-03-11 08:02:46

redhatcve

CVE-2022-0492

2022-02-07 11:59:48

redhat

(RHSA-2022:4642) Important: kernel security and bug fix update

2022-05-18 12:14:40

(RHSA-2022:4655) Important: kpatch-patch security update

2022-05-18 12:33:06

(RHSA-2022:4721) Important: kpatch-patch security update

2022-05-24 07:31:01

cbl_mariner

CVE-2022-0492 affecting package kernel 5.15.131.1-2

2022-04-09 06:52:47

CVE-2022-0492 affecting package kernel 5.10.189.1-1

2022-04-07 06:04:22

packetstorm

Docker cgroups Container Escape

2023-12-07 00:00:00

ubuntucve

CVE-2022-0492

2022-02-08 00:00:00

cnvd

Linux kernel authorization issue vulnerability

2022-02-09 00:00:00

hivepro

Linux Distributions affected by a privilege escalation vulnerability

2022-03-08 08:30:44

oraclelinux

Unbreakable Enterprise kernel-container security update

2022-02-09 00:00:00

Unbreakable Enterprise kernel-container security update

2022-02-28 00:00:00

Unbreakable Enterprise kernel security update

2022-02-28 00:00:00

prion

Design/Logic Flaw

2022-03-03 19:15:00

photon

Important Photon OS Security Update - PHSA-2022-0151

2022-02-05 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0151

2022-02-10 00:00:00

Important Photon OS Security Update - PHSA-2022-0440

2022-02-07 00:00:00

metasploit

Docker cgroups Container Escape

2023-11-28 18:44:08

virtuozzo

[Important] [Security] Virtuozzo ReadyKernel patch 142.0 for Virtuozzo Hybrid Server 7.0, 7.5

2022-05-25 00:00:00

centos

bpftool, kernel, perf, python security update

2022-05-19 15:09:15

veracode

Privilege Escalation

2022-03-26 18:16:10

redos

ROS-20220324-01

2022-03-24 00:00:00

thn

New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container

2022-03-05 08:43:00

cve

CVE-2022-0492

2022-03-03 19:15:00

zdt

Docker cgroups Container Escape Exploit

2023-12-07 00:00:00

ubuntu

Kernel Live Patch Security Notice

2022-03-23 00:00:00

Linux kernel vulnerabilities

2022-03-22 00:00:00

Linux kernel (OEM) vulnerabilities

2022-02-22 00:00:00

ics

Hitachi Energy APM Edge

2022-09-27 12:00:00

ibm

Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management

2022-06-03 10:36:45

mageia

Updated kernel packages fix security vulnerabilities

2022-02-15 23:50:31

Updated kernel-linus packages fix security vulnerabilities

2022-02-15 23:50:31

cloudlinux

Fix of CVE: CVE-2020-0466, CVE-2022-0492, CVE-2021-4155, CVE-2021-0920

2022-04-26 15:21:28

Fix of CVE: CVE-2021-0920, CVE-2022-0492, CVE-2020-0466, CVE-2021-4155

2022-04-26 15:23:09

rocky

kernel-rt security and bug fix update

2022-03-11 02:24:05

kernel security, bug fix, and enhancement update

2022-03-11 02:26:54

kernel-rt security and bug fix update

2022-03-10 14:37:54

rapid7blog

Metasploit Wrap-Up 12/8/2023

2023-12-08 19:15:04

threatpost

Bug in the Linux Kernel Allows Privilege Escalation, Container Escape

2022-03-08 14:52:05

cloudfoundry

USN-5339-1: Linux kernel vulnerabilities | Cloud Foundry

2022-05-23 00:00:00

USN-5338-1: Linux kernel vulnerabilities | Cloud Foundry

2022-04-14 00:00:00

suse

Security update for the Linux Kernel (important)

2022-03-08 00:00:00

Security update for the Linux Kernel (important)

2022-03-08 00:00:00

Security update for the Linux Kernel (important)

2022-03-08 00:00:00

osv

linux-oem-5.14 vulnerabilities

2022-02-22 22:45:56

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-hwe, linux-gcp, linux-gcp-4.15, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

2022-03-22 07:46:46

linux - security update

2022-03-09 00:00:00

debian

[SECURITY] [DSA 5095-1] linux security update

2022-03-09 15:30:29

slackware

[slackware-security] Slackware 15.0 kernel

2022-03-09 04:16:04

almalinux

Important: kernel security, bug fix, and enhancement update

2022-03-10 14:43:03

amazon

Important: kernel

2022-02-04 23:25:00

Important: kernel

2022-02-04 23:24:00

Important: kernel

2022-02-04 23:25:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.095 Low

EPSS

Percentile

94.7%

JSON

Related for DEBIANCVE:CVE-2022-0492