CISA Warns of Exploited Linux Kernel Vulnerability Affecting Container Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a vulnerability in the Linux kernel, specifically affecting container security. The vulnerability, identified as CVE-2022-0492, has a CVSS score of 7.8 and is classified as an improper authentication flaw. It allows attackers to elevate privileges and bypass namespace isolation, which is crucial for container security. The flaw is located in the cgroups feature of the Linux kernel, which is responsible for resource allocation among process groups. Only the first version of cgroups is affected. The vulnerability enables attackers to modify the release_agent file in the cgroup hierarchy, potentially allowing malicious scripts to run as root, leading to container escapes and privilege escalation. Although the technical details of this vulnerability were published three years ago, its active exploitation was only recently reported, prompting CISA to add it to its Known Exploited Vulnerabil... 
