VulnerabilityALERT High

CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

Impact

CISA lists CVE-2022-0492 as known exploited in the wild for Linux Kernel. Ransomware campaign use: Unknown. Federal remediation due date: 2026-06-05.

Recommended Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Published: 6/2/2026, 12:00:00 AMSource: CISA Known Exploited Vulnerabilities CatalogTags: CVE-2022-0492, Linux, Kernel, CISA KEV, CWE-287, CWE-862