SARA / Free Tools / CVE / CVE-2022-48991

CVE-2022-48991 — In the Linux kernel, the following vulnerability has been resolved:

In the Linux kernel, the following vulnerability has been resolved:

CVSS

8.8 HIGH

EPSS

0.25% (top 83.40%)

CWE

—

Published

2024-10-21T20:15:11.000

Last modified

2026-08-04T10:17:30.070

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

01What is this vulnerability?

In the Linux kernel, the following vulnerability has been resolved:

No structured affected-product list available — see references below for vendor advisories.

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

git.kernel.org — https://git.kernel.org/stable/c/1a3f8c6cd29d9078cc81b29d39d0e9ae1d6a03c3
git.kernel.org — https://git.kernel.org/stable/c/275c626c131cfe141beeb6c575e31fa53d32da19
git.kernel.org — https://git.kernel.org/stable/c/5450535901d89a5dcca5fbbc59a24fe89caeb465
git.kernel.org — https://git.kernel.org/stable/c/5ffc2a75534d9d74d49760f983f8eb675fa63d69
git.kernel.org — https://git.kernel.org/stable/c/7f445ca2e0e59c7971d0b7b853465e50844ab596
git.kernel.org — https://git.kernel.org/stable/c/c23105673228c349739e958fa33955ed8faddcaf
git.kernel.org — https://git.kernel.org/stable/c/f268f6cf875f3220afc77bdd0bf1bb136eb54db9
git.kernel.org — https://git.kernel.org/stable/c/ff2a1a6f869650aec99e9d070b5ab625bfbc5bc3

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.