GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49029 (GCVE-0-2022-49029)

Vulnerability from cvelistv5 – Published: 2024-10-21 20:06 – Updated: 2026-08-05 08:53
VLAI
Title
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
Summary
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-22 13:11 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < f2a13196ad41c6c2ab058279dffe6c97292e753a (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < 798198273bf86673b970b51acdb35e57f42b3fcb (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < 24b9633f7db7f4809be7053df1d2e117e7c2de10 (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < 7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3 (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < 90907cd4d11351ff76c9a447bcb5db0e264c47cd (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < 45f6e81863747c0d7bc6a95ec51129900e71467a (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863 (git)
Affected: 57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab , < e2a87785aab0dac190ac89be6a9ba955e2c634f2 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.24
Unaffected: 0 , < 2.6.24 (semver)
Unaffected: 4.9.335 , ≤ 4.9.* (semver)
Unaffected: 4.14.301 , ≤ 4.14.* (semver)
Unaffected: 4.19.268 , ≤ 4.19.* (semver)
Unaffected: 5.4.226 , ≤ 5.4.* (semver)
Unaffected: 5.10.158 , ≤ 5.10.* (semver)
Unaffected: 5.15.82 , ≤ 5.15.* (semver)
Unaffected: 6.0.12 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-49029",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:11:29.003244Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:18:36.071Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/hwmon/ibmpex.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f2a13196ad41c6c2ab058279dffe6c97292e753a",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "798198273bf86673b970b51acdb35e57f42b3fcb",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "24b9633f7db7f4809be7053df1d2e117e7c2de10",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "90907cd4d11351ff76c9a447bcb5db0e264c47cd",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "45f6e81863747c0d7bc6a95ec51129900e71467a",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            },
            {
              "lessThan": "e2a87785aab0dac190ac89be6a9ba955e2c634f2",
              "status": "affected",
              "version": "57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/hwmon/ibmpex.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.24"
            },
            {
              "lessThan": "2.6.24",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.335",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.301",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.268",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.226",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.82",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.335",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.301",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.268",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.226",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.158",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.82",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.12",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\n\nSmatch report warning as follows:\n\ndrivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:\n  \u0027\u0026data-\u003elist\u0027 not removed from list\n\nIf ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will\nbe freed, but data-\u003elist will not be removed from driver_data.bmc_data,\nthen list traversal may cause UAF.\n\nFix by removeing it from driver_data.bmc_data before free()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The ibmpex driver registers via an IPMI SMI watcher callback and talks to the local BMC over the IPMI system interface; an attacker needs local access on an affected IBM System X host, not network or adjacent-segment reachability.\nAC:L - Once ibmpex_find_sensors() fails after the list_add, the stale list entry is deterministic and the subsequent UAF on list traversal requires no race the attacker cannot influence; UAF bugs are scored AC:L unless an uncontrolled race is required.\nPR:L - On multi-user/datacenter IBM System X deployments the vulnerable driver can be present for a local unprivileged user, and when choosing between PR:L and PR:H the higher-severity option is required; this matches the worst reasonable local attacker model.\nUI:N - Exploitation does not require a victim to perform any action such as mounting a filesystem or opening a malicious file; the UAF follows from driver registration failure and later list traversal.\nS:U - This is a standard in-kernel use-after-free within the host kernel\u0027s authority and does not cross a VM, IOMMU, or other security boundary.\nC:H - Use-after-free of the ibmpex_bmc_data object on a traversable list enables heap reuse and arbitrary read primitives under standard kernel UAF exploitation.\nI:H - The same UAF enables heap spraying and control of the freed object\u0027s contents, yielding write/control-flow hijack primitives consistent with kernel memory-corruption impact.\nA:H - Traversing the dangling list entry can crash or oops the kernel (and UAF bugs are scored A:H even when not fully exploited for code execution)."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:53:33.547Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f2a13196ad41c6c2ab058279dffe6c97292e753a"
        },
        {
          "url": "https://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcb"
        },
        {
          "url": "https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10"
        },
        {
          "url": "https://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3"
        },
        {
          "url": "https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cd"
        },
        {
          "url": "https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467a"
        },
        {
          "url": "https://git.kernel.org/stable/c/e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863"
        },
        {
          "url": "https://git.kernel.org/stable/c/e2a87785aab0dac190ac89be6a9ba955e2c634f2"
        }
      ],
      "title": "hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49029",
    "datePublished": "2024-10-21T20:06:33.918Z",
    "dateReserved": "2024-08-22T01:27:53.651Z",
    "dateUpdated": "2026-08-05T08:53:33.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49029",
      "date": "2026-09-16",
      "epss": "0.00245",
      "percentile": "0.15929"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.6.24\", \"versionEndExcluding\": \"4.9.335\", \"matchCriteriaId\": \"C69D4C1C-5531-498D-BF16-99EC54FDEB19\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.10\", \"versionEndExcluding\": \"4.14.301\", \"matchCriteriaId\": \"0EE18A3A-1E78-44D6-9FDB-B267E4819993\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.15\", \"versionEndExcluding\": \"4.19.268\", \"matchCriteriaId\": \"04705C94-71FA-46AB-AF73-B551892B0EBA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.226\", \"matchCriteriaId\": \"274F5087-5805-4D03-8C74-8517300658F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.158\", \"matchCriteriaId\": \"D0FB1AF1-0A0B-4419-B25F-C61F17380E18\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.82\", \"matchCriteriaId\": \"0DC20DB6-73C1-4465-B931-117BFB8EBB02\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.0.12\", \"matchCriteriaId\": \"D6D56E90-F3EE-413D-B3E2-B518932F0C7D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2422816-0C14-4B5E-A1E6-A9D776E5C49B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*\", \"matchCriteriaId\": \"35B26BE4-43A6-4A36-A7F6-5B3F572D9186\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*\", \"matchCriteriaId\": \"3FFFB0B3-930D-408A-91E2-BAE0C2715D80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*\", \"matchCriteriaId\": \"8535320E-A0DB-4277-800E-D0CE5BBA59E8\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nhwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\\n\\nSmatch report warning as follows:\\n\\ndrivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:\\n  \u0027\u0026data-\u003elist\u0027 not removed from list\\n\\nIf ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will\\nbe freed, but data-\u003elist will not be removed from driver_data.bmc_data,\\nthen list traversal may cause UAF.\\n\\nFix by removeing it from driver_data.bmc_data before free().\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: hwmon: (ibmpex) Se corrige un posible UAF cuando fallo ibmpex_register_bmc() Advertencia de informe de Smatch de la siguiente manera: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: \u0027\u0026amp;data-\u0026gt;list\u0027 no se elimin\\u00f3 de la lista Si ibmpex_find_sensors() fallo en ibmpex_register_bmc(), se liberar\\u00e1n los datos, pero data-\u0026gt;list no se eliminar\\u00e1 de driver_data.bmc_data, entonces el recorrido de la lista puede causar UAF. Se soluciona elimin\\u00e1ndolo de driver_data.bmc_data antes de free().\"}]",
      "id": "CVE-2022-49029",
      "lastModified": "2024-10-24T15:59:48.417",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2024-10-21T20:15:13.690",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cd\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e2a87785aab0dac190ac89be6a9ba955e2c634f2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f2a13196ad41c6c2ab058279dffe6c97292e753a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-49029\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T20:15:13.690\",\"lastModified\":\"2026-08-04T10:17:31.873\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nhwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\\n\\nSmatch report warning as follows:\\n\\ndrivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:\\n  \u0027\u0026data-\u003elist\u0027 not removed from list\\n\\nIf ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will\\nbe freed, but data-\u003elist will not be removed from driver_data.bmc_data,\\nthen list traversal may cause UAF.\\n\\nFix by removeing it from driver_data.bmc_data before free().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: hwmon: (ibmpex) Se corrige un posible UAF cuando fallo ibmpex_register_bmc() Advertencia de informe de Smatch de la siguiente manera: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: \u0027\u0026amp;data-\u0026gt;list\u0027 no se elimin\u00f3 de la lista Si ibmpex_find_sensors() fallo en ibmpex_register_bmc(), se liberar\u00e1n los datos, pero data-\u0026gt;list no se eliminar\u00e1 de driver_data.bmc_data, entonces el recorrido de la lista puede causar UAF. Se soluciona elimin\u00e1ndolo de driver_data.bmc_data antes de free().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/hwmon/ibmpex.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"f2a13196ad41c6c2ab058279dffe6c97292e753a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"798198273bf86673b970b51acdb35e57f42b3fcb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"24b9633f7db7f4809be7053df1d2e117e7c2de10\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"90907cd4d11351ff76c9a447bcb5db0e264c47cd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"45f6e81863747c0d7bc6a95ec51129900e71467a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\",\"lessThan\":\"e2a87785aab0dac190ac89be6a9ba955e2c634f2\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/hwmon/ibmpex.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.24\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.24\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.335\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.301\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.268\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.226\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.158\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.82\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0.12\",\"lessThanOrEqual\":\"6.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-22T13:11:29.003244Z\",\"id\":\"CVE-2022-49029\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.24\",\"versionEndExcluding\":\"4.9.335\",\"matchCriteriaId\":\"C69D4C1C-5531-498D-BF16-99EC54FDEB19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.301\",\"matchCriteriaId\":\"0EE18A3A-1E78-44D6-9FDB-B267E4819993\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.268\",\"matchCriteriaId\":\"04705C94-71FA-46AB-AF73-B551892B0EBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.226\",\"matchCriteriaId\":\"274F5087-5805-4D03-8C74-8517300658F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.158\",\"matchCriteriaId\":\"D0FB1AF1-0A0B-4419-B25F-C61F17380E18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.82\",\"matchCriteriaId\":\"0DC20DB6-73C1-4465-B931-117BFB8EBB02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.0.12\",\"matchCriteriaId\":\"D6D56E90-F3EE-413D-B3E2-B518932F0C7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2422816-0C14-4B5E-A1E6-A9D776E5C49B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"35B26BE4-43A6-4A36-A7F6-5B3F572D9186\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3FFFB0B3-930D-408A-91E2-BAE0C2715D80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"8535320E-A0DB-4277-800E-D0CE5BBA59E8\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e2a87785aab0dac190ac89be6a9ba955e2c634f2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f2a13196ad41c6c2ab058279dffe6c97292e753a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T18:18:30+00:00",
      "cve": "CVE-2022-49029",
      "id": "CVE-2022-49029",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:fixed": "305",
      "product_status:known_affected": "112",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49029.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T01:28:41Z",
      "cve": "CVE-2022-49029",
      "id": "CVE-2022-49029",
      "initial_release_date": "2024-10-22T14:21:54Z",
      "product_status:known_affected": "504",
      "product_status:known_not_affected": "110",
      "product_status:recommended": "561",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49029",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49029.json",
      "version": "62"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-49029\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:11:29.003244Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:11:32.386Z\"}}], \"cna\": {\"title\": \"hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The ibmpex driver registers via an IPMI SMI watcher callback and talks to the local BMC over the IPMI system interface; an attacker needs local access on an affected IBM System X host, not network or adjacent-segment reachability.\\nAC:L - Once ibmpex_find_sensors() fails after the list_add, the stale list entry is deterministic and the subsequent UAF on list traversal requires no race the attacker cannot influence; UAF bugs are scored AC:L unless an uncontrolled race is required.\\nPR:L - On multi-user/datacenter IBM System X deployments the vulnerable driver can be present for a local unprivileged user, and when choosing between PR:L and PR:H the higher-severity option is required; this matches the worst reasonable local attacker model.\\nUI:N - Exploitation does not require a victim to perform any action such as mounting a filesystem or opening a malicious file; the UAF follows from driver registration failure and later list traversal.\\nS:U - This is a standard in-kernel use-after-free within the host kernel\u0027s authority and does not cross a VM, IOMMU, or other security boundary.\\nC:H - Use-after-free of the ibmpex_bmc_data object on a traversable list enables heap reuse and arbitrary read primitives under standard kernel UAF exploitation.\\nI:H - The same UAF enables heap spraying and control of the freed object\u0027s contents, yielding write/control-flow hijack primitives consistent with kernel memory-corruption impact.\\nA:H - Traversing the dangling list entry can crash or oops the kernel (and UAF bugs are scored A:H even when not fully exploited for code execution).\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"f2a13196ad41c6c2ab058279dffe6c97292e753a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"798198273bf86673b970b51acdb35e57f42b3fcb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"24b9633f7db7f4809be7053df1d2e117e7c2de10\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"90907cd4d11351ff76c9a447bcb5db0e264c47cd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"45f6e81863747c0d7bc6a95ec51129900e71467a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"57c7c3a0fdea95eddcaeba31e7ca7dfc917682ab\", \"lessThan\": \"e2a87785aab0dac190ac89be6a9ba955e2c634f2\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/hwmon/ibmpex.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.24\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.24\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.9.335\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.301\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.268\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.226\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.158\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.82\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.0.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/hwmon/ibmpex.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f2a13196ad41c6c2ab058279dffe6c97292e753a\"}, {\"url\": \"https://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcb\"}, {\"url\": \"https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10\"}, {\"url\": \"https://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3\"}, {\"url\": \"https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cd\"}, {\"url\": \"https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467a\"}, {\"url\": \"https://git.kernel.org/stable/c/e65cfd1f9cd27d9c27ee5cb88128a9f79f25d863\"}, {\"url\": \"https://git.kernel.org/stable/c/e2a87785aab0dac190ac89be6a9ba955e2c634f2\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nhwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\\n\\nSmatch report warning as follows:\\n\\ndrivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:\\n  \u0027\u0026data-\u003elist\u0027 not removed from list\\n\\nIf ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will\\nbe freed, but data-\u003elist will not be removed from driver_data.bmc_data,\\nthen list traversal may cause UAF.\\n\\nFix by removeing it from driver_data.bmc_data before free().\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.335\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.301\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.268\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.226\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.158\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.82\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.0.12\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1\", \"versionStartIncluding\": \"2.6.24\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T08:53:33.547Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-49029\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T08:53:33.547Z\", \"dateReserved\": \"2024-08-22T01:27:53.651Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T20:06:33.918Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.