SARA / Free Tools / CVE / CVE-2022-49768

CVE-2022-49768 — In the Linux kernel, the following vulnerability has been resolved:

In the Linux kernel, the following vulnerability has been resolved:

CVSS

7.5 HIGH

EPSS

0.37% (top 70.60%)

CWE

—

Published

2025-05-01T15:15:59.597

Last modified

2026-08-04T10:17:55.907

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

01What is this vulnerability?

In the Linux kernel, the following vulnerability has been resolved:

No structured affected-product list available — see references below for vendor advisories.

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

git.kernel.org — https://git.kernel.org/stable/c/52f1c45dde9136f964d63a77d19826c8a74e2c7f
git.kernel.org — https://git.kernel.org/stable/c/612c977f5d481f551d03d83d0aef588845c1300c
git.kernel.org — https://git.kernel.org/stable/c/82825dbf393f7c7979d462f9609a15bde8092b3f
git.kernel.org — https://git.kernel.org/stable/c/96760723aae1b45f733f702abb4333137143909f
git.kernel.org — https://git.kernel.org/stable/c/a4f1a01b2e81378fce9ca528d4d8a049e4b58fcd
git.kernel.org — https://git.kernel.org/stable/c/e3031280fe4eaf61a09e60823331f81f321be8e1
git.kernel.org — https://git.kernel.org/stable/c/f14858bc77c567e089965962877ee726ffad0556
git.kernel.org — https://git.kernel.org/stable/c/fec1406f5e7ab20b71f6d231792b0040e3300aaf

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.