CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2022-49048: linux kernel 5.14; +1 more affected products

CVE-2022-49048. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00692 (percentile 0.51793), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.19.199 (inclusive), before 4.19.239 (exclusive)
linux

linux kernel · from 5.4.136 (inclusive), before 5.4.190 (exclusive)
linux

linux kernel · from 5.10.54 (inclusive), before 5.10.112 (exclusive)
linux

linux kernel · from 5.13.6 (inclusive), before 5.14 (exclusive)
linux

linux kernel · from 5.14.1 (inclusive), before 5.15.35 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.17.4 (exclusive)
linux

linux kernel · 5.14
linux

linux kernel · 5.14 · update rc2
linux

linux kernel · 5.14 · update rc3
linux

linux kernel · 5.14 · update rc4
linux

linux kernel · 5.14 · update rc5
linux

linux kernel · 5.14 · update rc6
linux

linux kernel · 5.14 · update rc7
linux

linux kernel · 5.18 · update rc1
linux

linux kernel · 5.18 · update rc2
linux

Linux · bff0854e2f804f68d3e93d19e4580dbd69777e1d to before 74b68f5249f16c5f7f675d0f604fa6ae20e3a151, 7f4848229e91d508102b30396b8a1b710ac23637 to before ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435, 79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63 to before a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e, ccd27f05ae7b8ebc40af5b004e94517a919aa862 to before adee01bbf6cb5b3e4ed08be8ff866aac90f13836, ccd27f05ae7b8ebc40af5b004e94517a919aa862 to before e69fb3de87a8923e5931a272a38fa3cceb01da44, ccd27f05ae7b8ebc40af5b004e94517a919aa862 to before e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0, 350e10d217337480158b604bbf6601c50ed161c6, 4.19.199 to before 4.19.239, 5.4.136 to before 5.4.190, 5.10.54 to before 5.10.112, 5.13.6 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: net/ipv6/ip6_output.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
22.2 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00692 · percentile 0.51793 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2022-49048.html