Page generated: 11 Nov 2026, 06:46 UTC
← Dashboard

CVE-2022-0492

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpecte…

Read full description
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.2/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 5.53%: +0.03

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 12 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

SC Media
Press · 24 Jul 2026, 07:00 · Kubernetes Runtime Threats Explained - SC Media
Recorded Future
Press · 10 Jul 2026, 07:00 · June 2026 CVE Landscape - Recorded Future
LinkedIn
Press · 07 Jun 2026, 07:00 · CISA Flags Actively Exploited Linux Kernel Vulnerability - Orders Immediate Remediation Across Federal & Enterprise Systems - LinkedIn
CyberSecurityNews
Press · 07 Jun 2026, 07:00 · CISA Warns of Linux Kernel Improper Authentication Vulnerability Exploited in Attacks - CyberSecurityNews
The Hacker News
Press · 04 Jun 2026, 07:00 · ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories - The Hacker News
See all 12 source documents
Field Effect
Press · 04 Jun 2026, 07:00 · Linux container escape flaw exploited: validate kernel fixes/controls - Field Effect
SC Media
Press · 03 Jun 2026, 07:00 · CISA adds Android and Linux kernel flaws to exploited vulnerabilities catalog - SC Media
SecurityWeek
Press · 03 Jun 2026, 07:00 · Organizations Warned of Exploited Linux Kernel Vulnerability - SecurityWeek
BleepingComputer
Press · 03 Jun 2026, 07:00 · CISA warns of active attacks exploiting Android, Linux bugs - BleepingComputer
Huawei Central
Press · 18 Jul 2022, 07:00 · Honor Magic UI/Android July 2022 security update details - Huawei Central
Huawei Central
Press · 06 Jul 2022, 07:00 · Huawei EMUI July 2022 security update details released as EMUI 12 expands - Huawei Central
Unit 42
Press · 03 Mar 2022, 08:00 · New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape? - Unit 42

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.2 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

3

Public exploit entries / repo candidates

See 3 repos with metrics
RepositoryStarsForksLanguageUpdated
T1erno/CVE-2022-0492-Docker-Breakout-Checker-and-PoC81Shell18 Feb 2023, 05:28
Perimora/cve_2022_049201Shell20 Jul 2025, 11:10
smallcat9612/CVE-2022-0492-Docker-Breakout-Checker-and-PoC00—16 Dec 2025, 19:03
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 5.5%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
local access, low privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:33.111424+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
03 Mar 2022, 00:00
First press mention
03 Mar 2022, 08:00
Added to the CISA KEV catalog
02 Jun 2026, 00:00
Latest press mention
24 Jul 2026, 07:00
Score calculated
05 Nov 2026, 13:58
PoCs on GitHub
3 repositories