SARA / Free Tools / CVE / CVE-2022-49956

CVE-2022-49956 — In the Linux kernel, the following vulnerability has been resolved:

In the Linux kernel, the following vulnerability has been resolved:

CVSS

7.0 HIGH

EPSS

0.20% (top 89.50%)

CWE

—

Published

2025-06-18T11:15:22.773

Last modified

2026-08-04T10:18:00.997

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

01What is this vulnerability?

In the Linux kernel, the following vulnerability has been resolved:

No structured affected-product list available — see references below for vendor advisories.

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

Patch to a fixed version listed in the vendor advisory (see references below).
Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
Hunt historical logs for exploitation indicators — see Detection signatures below.

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

git.kernel.org — https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770
git.kernel.org — https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a
git.kernel.org — https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063
git.kernel.org — https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27
git.kernel.org — https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1
git.kernel.org — https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38
git.kernel.org — https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77
git.kernel.org — https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.