K54724312 : Linux kernel vulnerability CVE-2022-0492

Security Advisory Description

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly. (CVE-2022-0492)

Impact

An authenticated attacker may be able to exploit this vulnerability to disclose sensitive information, modify data, or cause a denial-of-service (DoS).