VulnIntel

CVE-2022-0492

CVSS 7.8 · HIGH
Exploited in the wild
Remediation overdue by 59 days
6 public PoCs
Proof-of-concept code linked in references
EPSS p97
Higher than 97% of all CVEs — imminent exploitation likely.
Patch available
Vendor advisory or patch linked

Published 3/3/2022 · updated 6/3/2026 · CWE-287, CWE-862

Share
Get asset-aware triage

Summary

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.

CVSS 7.8 — HIGH

7.8 / 10
  • AV: Local
  • AC: Low complexity
  • PR: Low privileges
  • UI: No user interaction
  • S: Scope unchanged
  • C: Confidentiality: High
  • I: Integrity: High
  • A: Availability: High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS exploitation probability

28.1%

Percentile p97 — Higher than 97% of all CVEs — imminent exploitation likely.

Affected products

27 vendor/product entries
  • Netapp H300s Firmwareall versions
  • Netapp H410c Firmwareall versions
  • Netapp H410s Firmwareall versions
  • Netapp H500s Firmwareall versions
  • Netapp H700s Firmwareall versions
  • Netapp Bootstrap Osall versions
Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

  1. Mar 3, 2022 · Disclosed / published in NVD
  2. Jun 2, 2026 · Added to CISA KEV catalog
  3. Jun 3, 2026 · Intel last updated
  4. Jun 5, 2026 · CISA remediation deadline

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 56 days ago
  • CVE.org· no data
  • FIRST EPSS· 56 days ago
  • CISA KEV· 46 days ago
  • OSV· 56 days ago

Listed in CISA KEV

Added 2026-06-02 · Remediation overdue by 59 days.

References

Patches & mitigations4
Vendor & CERT advisories10
Proof-of-concept / exploit6
Other1

Unlock the full report

See how CVE-2022-0492 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.