Linux Kernel Vulnerability: Escaping Containers by Abusing Cgroups

**Executive summary:** CVE-2022-0492 is a high-severity Linux kernel vulnerability in cgroups' release_agent that can permit container escape under specific conditions; while Docker's default seccomp and AppArmor usually mitigate exploitation, Kubernetes disables seccomp by default and user namespaces increase risk, so the report urges prompt patching, reboots, enabling container defenses (seccomp/AppArmor), avoiding running containers as root, and disabling unused user namespaces.