Evidence dossier

CVE-2022-0492

CVE-2022-0492

62.0–79.2Priority evidence range

As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

State: PUBLISHED
Published: Mar 3, 2022
Updated: Jun 3, 2026
Evidence coverage: 72%

CISA KEVCatalog member

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

FIRST EPSS5.53%

2026-07-18 · v2026.06.15 · percentile 91.9%

Source stateConflict visible

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

CISA-ADPindependent enrichment

container

CISA ADP Vulnrichment

Jul 19, 2026Original evidence ↗

CVEderivative copy

container

CVE Program Container

Jul 19, 2026Original evidence ↗

redhatoriginal assertion

container

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Jul 19, 2026Original evidence ↗

CISA KEVoriginal assertion

observed_exploitation

Linux Kernel Improper Authentication Vulnerability

Jul 19, 2026Original evidence ↗

FIRST EPSSoriginal assertion

model_probability

Probability 0.055280000000; percentile 0.919320000000

Jul 19, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

n/akernel

[{"status": "affected", "version": "kernel 5.17 rc3"}]unknown

Unknown vendorUnknown product

cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:redhat:codeready_linux_builder:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 2.6.24; end excluding 4.9.301supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 4.10; end excluding 4.14.266supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 4.15; end excluding 4.19.229supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 4.20; end excluding 5.4.177supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 5.5; end excluding 5.10.97supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 5.11; end excluding 5.15.20supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*; start including 5.16; end excluding 5.16.6supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.0:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*supported

Unknown vendorUnknown product

cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*supported

Assessments

CVSS by origin

7.8

nvd@nist.govCVSS 3.1 · role PrimaryCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9

nvd@nist.govCVSS 2.0 · role PrimaryAV:L/AC:M/Au:N/C:C/I:C/A:C

7.8

134c704f-9b21-4f2e-91b3-4a467353bcc0CVSS 3.1 · role SecondaryCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8

CISA-ADPCVSS 3.1 · role unknownCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Limitations and unknowns

KEV membership is authoritative for the catalog, not proof of exposure in any environment.
EPSS is a dated model probability and not an individual-environment prediction.
Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
NVD-carried upstream facts remain derivative and are not independent corroboration.
Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.