GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49048 (GCVE-0-2022-49048)

Vulnerability from cvelistv5 – Published: 2025-02-26 01:54 – Updated: 2026-08-05 08:53
VLAI
Title
ipv6: fix panic when forwarding a pkt with no in6 dev
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic in ip6_forward() when input interface has no in6 dev associated. The following tc commands were used to reproduce this panic: tc qdisc del dev vxlan100 root tc qdisc add dev vxlan100 root netem corrupt 5%
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: bff0854e2f804f68d3e93d19e4580dbd69777e1d , < 74b68f5249f16c5f7f675d0f604fa6ae20e3a151 (git)
Affected: 7f4848229e91d508102b30396b8a1b710ac23637 , < ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435 (git)
Affected: 79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63 , < a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e (git)
Affected: ccd27f05ae7b8ebc40af5b004e94517a919aa862 , < adee01bbf6cb5b3e4ed08be8ff866aac90f13836 (git)
Affected: ccd27f05ae7b8ebc40af5b004e94517a919aa862 , < e69fb3de87a8923e5931a272a38fa3cceb01da44 (git)
Affected: ccd27f05ae7b8ebc40af5b004e94517a919aa862 , < e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0 (git)
Affected: 350e10d217337480158b604bbf6601c50ed161c6 (git)
Affected: 4.19.199 , < 4.19.239 (semver)
Affected: 5.4.136 , < 5.4.190 (semver)
Affected: 5.10.54 , < 5.10.112 (semver)
Affected: 5.13.6 , < 5.14 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.14
Unaffected: 0 , < 5.14 (semver)
Unaffected: 4.19.239 , ≤ 4.19.* (semver)
Unaffected: 5.4.190 , ≤ 5.4.* (semver)
Unaffected: 5.10.112 , ≤ 5.10.* (semver)
Unaffected: 5.15.35 , ≤ 5.15.* (semver)
Unaffected: 5.17.4 , ≤ 5.17.* (semver)
Unaffected: 5.18 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_output.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "74b68f5249f16c5f7f675d0f604fa6ae20e3a151",
              "status": "affected",
              "version": "bff0854e2f804f68d3e93d19e4580dbd69777e1d",
              "versionType": "git"
            },
            {
              "lessThan": "ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435",
              "status": "affected",
              "version": "7f4848229e91d508102b30396b8a1b710ac23637",
              "versionType": "git"
            },
            {
              "lessThan": "a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e",
              "status": "affected",
              "version": "79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63",
              "versionType": "git"
            },
            {
              "lessThan": "adee01bbf6cb5b3e4ed08be8ff866aac90f13836",
              "status": "affected",
              "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
              "versionType": "git"
            },
            {
              "lessThan": "e69fb3de87a8923e5931a272a38fa3cceb01da44",
              "status": "affected",
              "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
              "versionType": "git"
            },
            {
              "lessThan": "e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0",
              "status": "affected",
              "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "350e10d217337480158b604bbf6601c50ed161c6",
              "versionType": "git"
            },
            {
              "lessThan": "4.19.239",
              "status": "affected",
              "version": "4.19.199",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.190",
              "status": "affected",
              "version": "5.4.136",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.112",
              "status": "affected",
              "version": "5.10.54",
              "versionType": "semver"
            },
            {
              "lessThan": "5.14",
              "status": "affected",
              "version": "5.13.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ip6_output.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.14"
            },
            {
              "lessThan": "5.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.239",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.190",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.112",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.239",
                  "versionStartIncluding": "4.19.199",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.190",
                  "versionStartIncluding": "5.4.136",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.112",
                  "versionStartIncluding": "5.10.54",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.35",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.4",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.13.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe following tc commands were used to reproduce this panic:\ntc qdisc del dev vxlan100 root\ntc qdisc add dev vxlan100 root netem corrupt 5%"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - ip6_forward runs on the IPv6 forwarding path (ipv6_rcv \u2192 ip6_rcv_finish \u2192 dst_input \u2192 ip6_forward) for packets received from the network; on an IPv6 router/gateway this is reachable by a remote peer sending packets through the host.\nAC:L - With IPv6 forwarding enabled (the realistic worst-case deployment for this code) and an ingress interface lacking in6_dev\u2014an expected case the function already uses __in6_dev_get_safely for\u2014an attacker can deterministically hit the disable_policy dereference by sending forwardable IPv6 packets, with no race outside their control.\nPR:N - IP forwarding processes unauthenticated packet data with no capability check or session; a remote peer on a path through the router needs no local credentials.\nUI:N - Crafted packets are handled automatically in softirq receive/forward context; no victim user or admin action is required beyond the host already acting as an IPv6 forwarder.\nS:U - The NULL dereference and resulting oops stay within the same host kernel authority; there is no VM escape, IOMMU bypass, or other cross-boundary impact.\nC:N - This is a pure NULL pointer dereference of idev-\u003ecnf.disable_policy with no out-of-bounds read, UAF, or other disclosure primitive.\nI:N - The fault is a NULL pointer read with no write, memory corruption, or control-flow hijack primitive beyond the ensuing oops.\nA:H - Dereferencing NULL idev causes a kernel oops/panic in the forwarding path, which is high availability impact and can be retriggered by further packets."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:53:35.698Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435"
        },
        {
          "url": "https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e"
        },
        {
          "url": "https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836"
        },
        {
          "url": "https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0"
        }
      ],
      "title": "ipv6: fix panic when forwarding a pkt with no in6 dev",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49048",
    "datePublished": "2025-02-26T01:54:24.115Z",
    "dateReserved": "2025-02-26T01:49:39.242Z",
    "dateUpdated": "2026-08-05T08:53:35.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49048",
      "date": "2026-09-18",
      "epss": "0.00679",
      "percentile": "0.50854"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/ip6_output.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "74b68f5249f16c5f7f675d0f604fa6ae20e3a151",
                    "status": "affected",
                    "version": "bff0854e2f804f68d3e93d19e4580dbd69777e1d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435",
                    "status": "affected",
                    "version": "7f4848229e91d508102b30396b8a1b710ac23637",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e",
                    "status": "affected",
                    "version": "79ec7b5b2f4fe38e5c7459ed0bdff4ef3386ab63",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "adee01bbf6cb5b3e4ed08be8ff866aac90f13836",
                    "status": "affected",
                    "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e69fb3de87a8923e5931a272a38fa3cceb01da44",
                    "status": "affected",
                    "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0",
                    "status": "affected",
                    "version": "ccd27f05ae7b8ebc40af5b004e94517a919aa862",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "350e10d217337480158b604bbf6601c50ed161c6",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.19.239",
                    "status": "affected",
                    "version": "4.19.199",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.4.190",
                    "status": "affected",
                    "version": "5.4.136",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.10.112",
                    "status": "affected",
                    "version": "5.10.54",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.14",
                    "status": "affected",
                    "version": "5.13.6",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/ipv6/ip6_output.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.14"
                  },
                  {
                    "lessThan": "5.14",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.239",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.190",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.112",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.35",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.17.*",
                    "status": "unaffected",
                    "version": "5.17.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "5.18",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C719E214-F9CC-432A-B21F-195A11A1FF21",
                    "versionEndExcluding": "4.19.239",
                    "versionStartIncluding": "4.19.199",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "160B967F-4A86-4141-854B-3753480ACABA",
                    "versionEndExcluding": "5.4.190",
                    "versionStartIncluding": "5.4.136",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D5AB9C21-EBCA-4C55-808B-768BD8EB0E7B",
                    "versionEndExcluding": "5.10.112",
                    "versionStartIncluding": "5.10.54",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3FCF5994-AD9A-4278-8BF1-BC9274834795",
                    "versionEndExcluding": "5.14",
                    "versionStartIncluding": "5.13.6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "41995907-877B-4363-9117-CC1F19F3715A",
                    "versionEndExcluding": "5.15.35",
                    "versionStartIncluding": "5.14.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E22C86CB-06CD-4D16-AB2A-F21EE8199262",
                    "versionEndExcluding": "5.17.4",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:-:*:*:*:*:*:*",
                    "matchCriteriaId": "6A05198E-F8FA-4517-8D0E-8C95066AED38",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "23B9E5C6-FAB5-4A02-9E39-27C8787B0991",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "D185CF67-7E4A-4154-93DB-CE379C67DB56",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "D1DA0AF6-02F4-47C7-A318-8C006ED0C665",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc5:*:*:*:*:*:*",
                    "matchCriteriaId": "49DD30B1-8C99-4C38-A66B-CAB3827BEE8A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc6:*:*:*:*:*:*",
                    "matchCriteriaId": "15013998-4AF0-4CDC-AB13-829ECD8A8E66",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.14:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "376A25CF-C05B-48F1-99B1-8FB0314A8E06",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "6AD94161-84BB-42E6-9882-4FC0C42E9FC1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "7AB06DDF-3C2B-416D-B448-E990D8FF67A9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe following tc commands were used to reproduce this panic:\ntc qdisc del dev vxlan100 root\ntc qdisc add dev vxlan100 root netem corrupt 5%"
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ipv6: se corrige el p\u00e1nico al reenviar un paquete sin un dev in6 kongweibin inform\u00f3 un p\u00e1nico del kernel en ip6_forward() cuando la interfaz de entrada no tiene un dev in6 asociado. Se utilizaron los siguientes comandos tc para reproducir este p\u00e1nico: tc qdisc del dev vxlan100 root tc qdisc add dev vxlan100 root netem corrupt 5%"
          }
        ],
        "id": "CVE-2022-49048",
        "lastModified": "2026-08-04T10:17:32.173",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-02-26T07:00:42.073",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:46:12+00:00",
      "cve": "CVE-2022-49048",
      "id": "CVE-2022-49048",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ipv6: fix panic when forwarding a pkt with no in6 dev",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49048.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.