CVE-2022-0492

CVSS v3.1 7.8 (High)

CVSS v2.0 6.9 (Medium)

EPSS 9.51 % (95^th)

Affected Products 30

Advisories 59

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

Weaknesses

CWE-287: Improper Authentication
CWE-862: Missing Authorization

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2022-03-03 19:15:08
(2 years ago)
Updated Date: 2023-12-07 15:15:07
(9 months ago)

Affected Products

Netapp

Redhat

Configuration #1

	CPE23	From	Up To
Linux Kernel from 2.6.24 version and prior 4.9.301 version	cpe:2.3:o:linux:linux_kernel	>= 2.6.24	< 4.9.301
Linux Kernel from 4.10 version and prior 4.14.266 version	cpe:2.3:o:linux:linux_kernel	>= 4.10	< 4.14.266
Linux Kernel from 4.15 version and prior 4.19.229 version	cpe:2.3:o:linux:linux_kernel	>= 4.15	< 4.19.229
Linux Kernel from 4.20 version and prior 5.4.177 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.4.177
Linux Kernel from 5.5 version and prior 5.10.97 version	cpe:2.3:o:linux:linux_kernel	>= 5.5	< 5.10.97
Linux Kernel from 5.11 version and prior 5.15.20 version	cpe:2.3:o:linux:linux_kernel	>= 5.11	< 5.15.20
Linux Kernel from 5.16 version and prior 5.16.6 version	cpe:2.3:o:linux:linux_kernel	>= 5.16	< 5.16.6
Linux Kernel 5.17 Rc1	cpe:2.3:o:linux:linux_kernel:5.17:rc1
Linux Kernel 5.17 Rc2	cpe:2.3:o:linux:linux_kernel:5.17:rc2

Configuration #2

		CPE23	From	Up To
	Debian Linux 9.0	cpe:2.3:o:debian:debian_linux:9.0
	Debian Linux 10.0	cpe:2.3:o:debian:debian_linux:10.0
	Debian Linux 11.0	cpe:2.3:o:debian:debian_linux:11.0

Configuration #3

		CPE23	From	Up To
	Redhat Codeready Linux Builder 8.0	cpe:2.3:a:redhat:codeready_linux_builder:8.0
	Redhat Codeready Linux Builder 8.2	cpe:2.3:a:redhat:codeready_linux_builder:8.2
	Redhat Codeready Linux Builder for Power Little Endian 8.0	cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0
	Redhat Codeready Linux Builder for Power Little Endian 8.2	cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.2
	Redhat Virtualization Host 4.0	cpe:2.3:a:redhat:virtualization_host:4.0
	Redhat Enterprise Linux 8.0	cpe:2.3:o:redhat:enterprise_linux:8.0
	Redhat Enterprise Linux Eus 8.2	cpe:2.3:o:redhat:enterprise_linux_eus:8.2
	Redhat Enterprise Linux for Ibm Z Systems 8.0	cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0
	Redhat Enterprise Linux for Ibm Z Systems Eus 8.0	cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.0
	Redhat Enterprise Linux for Power Little Endian 8.0	cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0
	Redhat Enterprise Linux for Power Little Endian Eus 8.0	cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.0
	Redhat Enterprise Linux for Real Time For Nfv Tus 8.0	cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.0
	Redhat Enterprise Linux for Real Time For Nfv Tus 8.2	cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2
	Redhat Enterprise Linux for Real Time Tus 8.0	cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.0
	Redhat Enterprise Linux for Real Time Tus 8.2	cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2
	Redhat Enterprise Linux Server Aus 8.2	cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
	Redhat Enterprise Linux Server for Power Little Endian Update Services For Sap Solutions 8.1	cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1
	Redhat Enterprise Linux Server for Power Little Endian Update Services For Sap Solutions 8.2	cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2
	Redhat Enterprise Linux Server Tus 8.2	cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
	Redhat Enterprise Linux Server Update Services for Sap Solutions 8.1	cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1
	Redhat Enterprise Linux Server Update Services for Sap Solutions 8.2	cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2

Configuration #4

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04:::*:lts
	Canonical Ubuntu Linux 22.04	cpe:2.3:o:canonical:ubuntu_linux:22.04:::*:lts

Configuration #5

		CPE23	From	Up To
	Fedoraproject Fedora 35	cpe:2.3:o:fedoraproject:fedora:35

Configuration #6

		CPE23	From	Up To
	Netapp Solidfire, Enterprise Sds & Hci Storage Node	cpe:2.3:a:netapp:solidfire\%2c_enterprise_sds_\%26_hci_storage_node:-
	Netapp Solidfire & Hci Management Node	cpe:2.3:a:netapp:solidfire_\%26_hci_management_node:-
	Netapp H300e	cpe:2.3:h:netapp:h300e:-
	Netapp H300s	cpe:2.3:h:netapp:h300s:-
	Netapp H410c	cpe:2.3:h:netapp:h410c:-
	Netapp H410s	cpe:2.3:h:netapp:h410s:-
	Netapp H500e	cpe:2.3:h:netapp:h500e:-
	Netapp H500s	cpe:2.3:h:netapp:h500s:-
	Netapp H700e	cpe:2.3:h:netapp:h700e:-
	Netapp H700s	cpe:2.3:h:netapp:h700s:-
	Netapp Hci Compute Node	cpe:2.3:h:netapp:hci_compute_node:-

Weaknesses

Affected Products

Canonical

Debian

Fedoraproject

Linux