NetSight
IP …
high7.8Known exploited

CVE-2022-0492

Linux Kernel Improper Authentication Vulnerability

Exploited in the wild

This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-06-02. Federal due date: 2026-06-05.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Impact

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

Affected products

VendorProductAffected versions
NetappH300s Firmware
All versions
NetappH410c Firmware
All versions
NetappH410s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappBootstrap Os
All versions
LinuxLinux Kernel
from 2.6.24 before 4.9.301
from 4.10 before 4.14.266
from 4.15 before 4.19.229
from 4.20 before 5.4.177
from 5.5 before 5.10.97
from 5.11 before 5.15.20
DebianDebian Linux
Versions 9.0, 10.0, 11.0
RedhatCodeready Linux Builder
Versions 8.0, 8.2
RedhatCodeready Linux Builder For Power Little Endian
Versions 8.0, 8.2
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux
Version 8.0

Weakness classification

CWE-287CWE-862

References