P5Verified

CVE-2022-49554: linux kernel from 4.14 (inclusive), before 4.14.282 (exclusive), from 4.15 (inclusive), before 4.19.246 (exclusive)…

CVE-2022-49554. CVSS 3.1 base score 4.7 (MEDIUM, NVD). EPSS 0.00217 (percentile 0.11252), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.14 (inclusive), before 4.14.282 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.246 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.197 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.120 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.45 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.17.13 (exclusive)
linux

linux kernel · from 5.18 (inclusive), before 5.18.2 (exclusive)
linux

Linux · 77ff465799c60294e248000cd22ae8171da3304c to before 3674d8a8dadd03a447dd21069d4dacfc3399b63b, 77ff465799c60294e248000cd22ae8171da3304c to before 645996efc2ae391246d595832aaa6f9d3cc338c7, 77ff465799c60294e248000cd22ae8171da3304c to before fc658c083904427abbf8f18280d517ee2668677c, 77ff465799c60294e248000cd22ae8171da3304c to before fae05b2314b147a78fbed1dc4c645d9a66313758, 77ff465799c60294e248000cd22ae8171da3304c to before 3ec459c8810e658401be428d3168eacfc380bdd0, 77ff465799c60294e248000cd22ae8171da3304c to before 8ba7b7c1dad1f6503c541778f31b33f7f62eb966, 77ff465799c60294e248000cd22ae8171da3304c to before c5402fb5f71f1a725f1e55d9c6799c0c7bec308f, 77ff465799c60294e248000cd22ae8171da3304c to before 2505a981114dcb715f8977b8433f7540854851d8
Linux

Linux · 4.14
Linux

Component: Not specified by the source
File: mm/zsmalloc.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 22:59 UTC

CWE: CWE-362
CCR priority: 18.9 /100 (P5)
CVSS 3.1: 4.7 /10 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00217 · percentile 0.11252 · 2026-10-14
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2022-49554.html