CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability

Summary

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

Remediation

Inventory every Linux Kernel deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.
Review logs from before the change for signs of exploitation.

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

Advisoryhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af
Advisoryhttps://www.kernel.org/
Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2022-0492
Advisoryhttps://www.debian.org/security/2022/dsa-5095
Advisoryhttps://www.debian.org/security/2022/dsa-5096
Referencehttps://bugzilla.redhat.com/show_bug.cgi?id=2051505
Referencehttps://lists.debian.org/debian-lts-announce/2022/03/msg00011.html
Referencehttps://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
Referencehttps://security.netapp.com/advisory/ntap-20220419-0002/
Referencehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0492