high CISA KEV

CVE-2022-0492

Linux Kernel Improper Authentication Vulnerability

// Description

Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.

// Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal remediation due Jun 5, 2026 — past due

// Coverage

CISA KEV Update: Active Exploitation of CVE-2022-0492 and CVE-2025-48595
Jun 2, 2026