Critical SEVERITY — Vulnerability

CVE-2022-0492 — Linux Kernel Improper Authentication Vulnerability

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

Platform
Ubuntu Server
CVE Record
CVE-2022-0492
Advisory
CISA-KEV
Published
02 June 2026
Views
3
Primary source: Review the official advisory at nvd.nist.gov Kaynağa Git

Status

This vulnerability is included in the catalog of vulnerabilities confirmed by CISA to be actively exploited. Not a theoretical risk — it is being used in the field.

Description

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

Metadata

  • Vendor: Linux
  • Product: Kernel
  • Added to catalog: 2026-06-02

CISA-Mandated Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  • Deadline for federal agencies: 2026-06-05
Linux Kernel

Ubuntu Server — Related Advisories

VIEW ALL →