高危
Linux kernel授权问题漏洞(CVE-2022-0492)
2022-02-08 00:00:00 公开 ，2026-09-01 09:40:18 更新
- CISA KEV
- 关键漏洞
- 本地
- CWE Top 25 (2023)
- 公开PoC
- 开源组件漏洞
- CWE Top 25 (2024)
- CWEs：
- CWE-287 （Improper Authentication）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2026-06-02 08:00:00
风险信息
- CVSS v2 向量
- AV:L/AC:M/Au:N/C:C/I:C/A:C
- CVSS v2 风险值
- 6.9
- CVSS v3 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 7.8
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 授权问题
- 漏洞描述
- Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。Linux kernel存在授权问题漏洞，该漏洞源于软件对用权限限制存在问题。攻击者可利用该漏洞可以通过Cgroups Release Agent绕过Linux内核的限制，以升级他的权限。
- 修复建议
- 目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://access.redhat.com/security/cve/cve-2022-0492
参考链接
- https://packetstormsecurity.com/files/166124/Ubuntu-Security-Notice-USN-5302-1.html
- https://www.auscert.org.au/bulletins/ESB-2022.0784
- https://vigilance.fr/vulnerability/Linux-kernel-privilege-escalation-via-Cgroups-Release-agent-37462
- https://access.redhat.com/security/cve/cve-2022-0492
OSV
- https://www.debian.org/security/2022/dsa-5095
CVE · vendor-advisory · x_refsource_DEBIAN
- https://www.debian.org/security/2022/dsa-5096
CVE · vendor-advisory · x_refsource_DEBIAN
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
CVE · x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20220419-0002/
CVE · x_refsource_CONFIRM
- https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
CVE · mailing-list · x_refsource_MLIST
- http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html
CVE · x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=2051505
OSV · x_refsource_MISC
- https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
CVE · mailing-list · x_refsource_MLIST
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
CVE · x_refsource_MISC
- http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
CVE · Exploit · VDB Entry
- https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2022/2022-05.md
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-270-02
- https://vulners.com/cve/CVE-2021-0920
OSV
- https://vulners.com/cve/CVE-2021-4154
OSV
- https://vulners.com/cve/CVE-2022-0330
OSV
- https://vulners.com/cve/CVE-2022-0435
OSV
- https://vulners.com/cve/CVE-2022-0492
OSV
- https://vulners.com/cve/CVE-2022-0516
OSV
- https://vulners.com/cve/CVE-2022-0847
OSV
- https://vulners.com/cve/CVE-2022-22942
OSV
- https://osv.dev/vulnerability/ALSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0825
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2031930
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2034514
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2042404
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2044809
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2048738
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2050237
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2060795
OSV
- https://osv.dev/vulnerability/RLSA-2022:0825
OSV
- https://errata.rockylinux.org/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/RLSA-2022:0819
OSV
- https://osv.dev/vulnerability/DSA-5096-1
OSV
- https://osv.dev/vulnerability/DLA-2941-1
OSV
- https://osv.dev/vulnerability/DSA-5095-1
OSV
- https://osv.dev/vulnerability/DLA-2940-1
OSV
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-wearables-202207-0000001290388816
HarmonyOS
- https://source.android.com/security/bulletin/2022-06-01
OSV
- https://android.googlesource.com/kernel/common/+/ee1e2de73cc54
OSV
- https://android.googlesource.com/kernel/common/+/1fc3444cda9a7
OSV
- https://osv.dev/vulnerability/PUB-A-224859358
OSV
- https://ubuntu.com/security/CVE-2022-0492
OSV
- https://www.openwall.com/lists/oss-security/2022/02/04/1
OSV
- https://ubuntu.com/security/notices/USN-5302-1
OSV
- https://ubuntu.com/security/notices/USN-5337-1
OSV
- https://ubuntu.com/security/notices/USN-5338-1
OSV
- https://ubuntu.com/security/notices/USN-5339-1
OSV
- https://ubuntu.com/security/notices/USN-5343-1
OSV
- https://ubuntu.com/security/notices/USN-5362-1
OSV
- https://ubuntu.com/security/notices/USN-5368-1
OSV
- https://ubuntu.com/security/notices/USN-5377-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2022-0492
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2022-0492
OSV
- https://security-tracker.debian.org/tracker/CVE-2022-0492
OSV
- https://osv.dev/vulnerability/CVE-2022-0492
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2022-0492
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492
NVD · US Government Resource
- https://access.redhat.com/errata/RHSA-2022:5157
OSV
- https://access.redhat.com/security/updates/classification/#important
OSV
- https://bugzilla.redhat.com/show_bug.cgi?id=2086753
OSV
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5157.json
OSV
- https://nvd.nist.gov/vuln/detail/CVE-2022-0492
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
OSV
- https://access.redhat.com/security/cve/CVE-2022-1729
OSV
- https://www.cve.org/CVERecord?id=CVE-2022-1729
OSV
- https://nvd.nist.gov/vuln/detail/CVE-2022-1729
OSV
- https://osv.dev/vulnerability/RHSA-2022:5157
OSV