Lucene search
HistoryMar 03, 2022 - 7:15 p.m.
CVE-2022-0492
linux kernel
cgroup_release_agent_write
vulnerability
privilege escalation
namespace isolation
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.095
Percentile
94.8%
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
Affected configurations
Node
linuxlinux_kernelRange2.6.24–4.9.301
ORlinuxlinux_kernelRange4.10–4.14.266
ORlinuxlinux_kernelRange4.15–4.19.229
ORlinuxlinux_kernelRange4.20–5.4.177
ORlinuxlinux_kernelRange5.5–5.10.97
ORlinuxlinux_kernelRange5.11–5.15.20
ORlinuxlinux_kernelRange5.16–5.16.6
ORlinuxlinux_kernelMatch5.17rc1
ORlinuxlinux_kernelMatch5.17rc2
Node
debiandebian_linuxMatch9.0
ORdebiandebian_linuxMatch10.0
ORdebiandebian_linuxMatch11.0
Node
redhatcodeready_linux_builderMatch8.0
ORredhatcodeready_linux_builderMatch8.2
ORredhatcodeready_linux_builder_for_power_little_endianMatch8.0
ORredhatcodeready_linux_builder_for_power_little_endianMatch8.2
ORredhatvirtualization_hostMatch4.0
ORredhatenterprise_linuxMatch8.0
ORredhatenterprise_linux_eusMatch8.2
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.0
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.0
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.0
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.2
ORredhatenterprise_linux_for_real_time_tusMatch8.0
ORredhatenterprise_linux_for_real_time_tusMatch8.2
ORredhatenterprise_linux_server_ausMatch8.2
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.1
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_tusMatch8.2
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.1
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2
Node
canonicalubuntu_linuxMatch14.04esm
ORcanonicalubuntu_linuxMatch16.04esm
ORcanonicalubuntu_linuxMatch18.04lts
ORcanonicalubuntu_linuxMatch20.04lts
ORcanonicalubuntu_linuxMatch22.04lts
Node
fedoraprojectfedoraMatch35
Node
netappsolidfire\,_enterprise_sds_\&_hci_storage_nodeMatch-
ORnetappsolidfire_\&_hci_management_nodeMatch-
ORnetapph300eMatch-
ORnetapph300sMatch-
ORnetapph410cMatch-
ORnetapph410sMatch-
ORnetapph500eMatch-
ORnetapph500sMatch-
ORnetapph700eMatch-
ORnetapph700sMatch-
ORnetapphci_compute_nodeMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| linux | linux_kernel | 5.17 | cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:* |
| linux | linux_kernel | 5.17 | cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:* |
| debian | debian_linux | 9.0 | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| debian | debian_linux | 10.0 | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| debian | debian_linux | 11.0 | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| redhat | codeready_linux_builder | 8.0 | cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* |
| redhat | codeready_linux_builder | 8.2 | cpe:2.3:a:redhat:codeready_linux_builder:8.2:*:*:*:*:*:*:* |
| redhat | codeready_linux_builder_for_power_little_endian | 8.0 | cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:*:*:* |
| redhat | codeready_linux_builder_for_power_little_endian | 8.2 | cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.2:*:*:*:*:*:*:* |
References
packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
bugzilla.redhat.com/show_bug.cgi?id=2051505
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
lists.debian.org/debian-lts-announce/2022/03/msg00011.html
lists.debian.org/debian-lts-announce/2022/03/msg00012.html
security.netapp.com/advisory/ntap-20220419-0002/
www.debian.org/security/2022/dsa-5095
www.debian.org/security/2022/dsa-5096
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1036-1)
2022-03-31 00:00:00
CentOS: Security Advisory for bpftool (CESA-2022:4642)
2022-05-20 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1782)
2022-06-01 00:00:00
nessus
nessus
Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:4642)
2022-05-20 00:00:00
F5 Networks BIG-IP : Linux kernel vulnerability (K54724312)
2022-05-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-0492 affecting package kernel for versions less than 5.15.26.1-2
2022-04-09 06:52:47
CVE-2022-0492 affecting package kernel 5.10.189.1-1
2022-04-07 06:04:22
f5
f5
K54724312 : Linux kernel vulnerability CVE-2022-0492
2022-05-25 00:00:00
redhatcve
redhatcve
CVE-2022-0492
2022-02-07 11:59:48
githubexploit
githubexploit
Exploit for Missing Authorization in Linux Linux Kernel
2022-03-07 10:03:17
Exploit for Missing Authorization in Linux Linux Kernel
2022-05-09 13:20:03
Exploit for Missing Authorization in Linux Linux Kernel
2022-03-11 08:02:46
redhat
redhat
(RHSA-2022:4642) Important: kernel security and bug fix update
2022-05-18 12:14:40
(RHSA-2022:4655) Important: kpatch-patch security update
2022-05-18 12:33:06
(RHSA-2022:4721) Important: kpatch-patch security update
2022-05-24 07:31:01
ubuntucve
ubuntucve
CVE-2022-0492
2022-02-08 00:00:00
packetstorm
packetstorm
Docker cgroups Container Escape
2023-12-07 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2022-05-19 15:09:15
cnvd
cnvd
Linux kernel authorization issue vulnerability
2022-02-09 00:00:00
prion
prion
Design/Logic Flaw
2022-03-03 19:15:00
virtuozzo
virtuozzo
hivepro
hivepro
Linux Distributions affected by a privilege escalation vulnerability
2022-03-08 08:30:44
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2022-02-09 00:00:00
Unbreakable Enterprise kernel-container security update
2022-02-28 00:00:00
Unbreakable Enterprise kernel security update
2022-02-28 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0151
2022-02-05 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0151
2022-02-10 00:00:00
Important Photon OS Security Update - PHSA-2022-0440
2022-02-07 00:00:00
metasploit
metasploit
Docker cgroups Container Escape
2023-11-28 18:44:08
veracode
veracode
Privilege Escalation
2022-03-26 18:16:10
redos
redos
ROS-20220324-01
2022-03-24 00:00:00
thn
thn
New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container
2022-03-05 08:43:00
debiancve
debiancve
CVE-2022-0492
2022-03-03 19:15:08
cvelist
cvelist
CVE-2022-0492
2022-03-03 00:00:00
cve
cve
CVE-2022-0492
2022-03-03 19:15:08
zdt
zdt
Docker cgroups Container Escape Exploit
2023-12-07 00:00:00
ubuntu
ubuntu
Kernel Live Patch Security Notice
2022-03-23 00:00:00
Linux kernel vulnerabilities
2022-03-22 00:00:00
Linux kernel (OEM) vulnerabilities
2022-02-22 00:00:00
ics
ics
Hitachi Energy APM Edge
2022-09-27 12:00:00
ibm
ibm
threatpost
threatpost
Bug in the Linux Kernel Allows Privilege Escalation, Container Escape
2022-03-08 14:52:05
mageia
mageia
Updated kernel packages fix security vulnerabilities
2022-02-15 23:50:31
Updated kernel-linus packages fix security vulnerabilities
2022-02-15 23:50:31
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-0920, CVE-2022-0492, CVE-2020-0466, CVE-2021-4155
2022-04-26 15:23:09
Fix of CVE: CVE-2020-0466, CVE-2022-0492, CVE-2021-4155, CVE-2021-0920
2022-04-26 15:21:28
rapid7blog
rapid7blog
Metasploit Wrap-Up 12/8/2023
2023-12-08 19:15:04
rocky
rocky
kernel-rt security and bug fix update
2022-03-11 02:24:05
kernel security, bug fix, and enhancement update
2022-03-11 02:26:54
kernel-rt security and bug fix update
2022-03-10 14:37:54
cloudfoundry
cloudfoundry
USN-5339-1: Linux kernel vulnerabilities | Cloud Foundry
2022-05-23 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2022-03-08 00:00:00
Security update for the Linux Kernel (important)
2022-03-08 00:00:00
Security update for the Linux Kernel (important)
2022-03-08 00:00:00
osv
osv
linux-oem-5.14 vulnerabilities
2022-02-22 22:45:56
Important: kernel-rt security and bug fix update
2022-03-10 14:37:54
debian
debian
[SECURITY] [DSA 5095-1] linux security update
2022-03-09 15:30:29
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2022-03-09 04:16:04
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2022-03-10 14:43:03
amazon
amazon
Important: kernel
2022-02-04 23:25:00
CVSS2
6.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.095
Percentile
94.8%
Related for NVD:CVE-2022-0492