Red Hat Kernel Updates Fix cgroups v1 Container-Escape Privilege Escalation
Attack Tradecraft · 9 sources · Updated 2mo ago · First seen Mar 10, 2022
Red Hat released Important RHEL kernel updates addressing multiple Linux kernel flaws, including CVE-2022-0492, in which abuse of the cgroups v1 release_agent feature can enable local privilege escalation and bypass namespace isolation, creating a container-escape path. The upstream fix is tracked in commit 24f6008564183aa120d07c03d9289519c2fe02af; related kernel issues include CVE-2022-0847 (Dirty Pipe), file-descriptor handling defects, missing TLB flushing, usercopy use-after-free conditions, kernel memory read/write flaws, and TIPC denial of service.
Affected updates include RHEL 8 kernel 4.18.0-348.20.1.el8_5 across x86_64, ARM64, IBM Z, and Power LE variants, as well as kernel-rt packages for RHEL 8.2 Real Time Telecommunications and NFV Telecommunications Update Service on x86_64. Organizations should apply the applicable updated kernel packages and reboot hosts to activate the fixes. Red Hat assessed OpenShift Container Platform clusters with SELinux enabled by default as protected against the CVE-2022-0492 container-escape and privilege-escalation path.
