GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49084 (GCVE-0-2022-49084)

Vulnerability from cvelistv5 – Published: 2025-02-26 01:54 – Updated: 2026-08-05 08:53
VLAI
Title
qede: confirm skb is allocated before using
Summary
In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always works and goes straight to skb_reserve(). However, build_skb() can fail under memory pressure. This results in a kernel panic because the skb to reserve is NULL. Add a check in case build_skb() failed to allocate and return NULL. The NULL return is handled correctly in callers to qede_build_skb().
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < 9648adb1b3ece55c657d3a4f52bfee663b710dfe (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < 034a92c6a81048128fc7b18d278d52438a13902a (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < 8928239e5e2e460d95b8a0b89f61671625e7ece0 (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < c9bdce2359b5f4986eb38d1e81865b3586cc20d2 (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < b2d6b3db9d1cf80908964036dbe1c52a86b1afb1 (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < e1fd0c42acfa22bb34d2ab6a111484f466ab8093 (git)
Affected: 8a8633978b842c88fbcfe00d4e5dde96048f630e , < 4e910dbe36508654a896d5735b318c0b88172570 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.18
Unaffected: 0 , < 4.18 (semver)
Unaffected: 4.19.238 , ≤ 4.19.* (semver)
Unaffected: 5.4.189 , ≤ 5.4.* (semver)
Unaffected: 5.10.111 , ≤ 5.10.* (semver)
Unaffected: 5.15.34 , ≤ 5.15.* (semver)
Unaffected: 5.16.20 , ≤ 5.16.* (semver)
Unaffected: 5.17.3 , ≤ 5.17.* (semver)
Unaffected: 5.18 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/qlogic/qede/qede_fp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9648adb1b3ece55c657d3a4f52bfee663b710dfe",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "034a92c6a81048128fc7b18d278d52438a13902a",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "8928239e5e2e460d95b8a0b89f61671625e7ece0",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "c9bdce2359b5f4986eb38d1e81865b3586cc20d2",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "b2d6b3db9d1cf80908964036dbe1c52a86b1afb1",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "e1fd0c42acfa22bb34d2ab6a111484f466ab8093",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            },
            {
              "lessThan": "4e910dbe36508654a896d5735b318c0b88172570",
              "status": "affected",
              "version": "8a8633978b842c88fbcfe00d4e5dde96048f630e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/qlogic/qede/qede_fp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.18"
            },
            {
              "lessThan": "4.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.34",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.238",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.189",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.111",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.34",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.20",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.3",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nqede: confirm skb is allocated before using\n\nqede_build_skb() assumes build_skb() always works and goes straight\nto skb_reserve(). However, build_skb() can fail under memory pressure.\nThis results in a kernel panic because the skb to reserve is NULL.\n\nAdd a check in case build_skb() failed to allocate and return NULL.\n\nThe NULL return is handled correctly in callers to qede_build_skb()."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - qede is the QLogic/Marvell FastLinQ Ethernet NIC RX path (qede_msix_fp_int \u2192 NAPI qede_poll \u2192 qede_rx_int \u2192 qede_rx_process_cqe \u2192 qede_rx_build_skb \u2192 qede_build_skb), reached when frames arrive on internet-facing servers and cloud VFs; a remote peer triggers it by sending packets.\nAC:L - build_skb() uses GFP_ATOMIC and fails under atomic allocation pressure that a sustained packet flood readily creates, and frames larger than the 256-byte rx_copybreak (or TPA/GRO) deterministically take the vulnerable path; the attacker drives both reachability and the failure condition.\nPR:N - NIC receive and NAPI softirq processing run on every inbound frame with no authentication, capability check, or local account required.\nUI:N - Reception and NAPI polling proceed automatically whenever the qede interface is up; no victim action such as opening a file or mounting a filesystem is needed.\nS:U - The NULL dereference and resulting oops remain inside the host kernel that owns the qede driver; no VM escape, IOMMU bypass, or other cross-authority boundary is crossed.\nC:N - skb_reserve() on a NULL skb is a pure NULL pointer dereference of fixed struct offsets below mmap_min_addr with no OOB read, UAF reclaim, or other disclosure primitive.\nI:N - The fault stores through a NULL skb pointer and aborts immediately without modifying attacker-influenced kernel objects, so there is no write primitive or control-flow hijack.\nA:H - The NULL dereference in skb_reserve() causes a kernel oops/panic in softirq/NAPI context, which is a full availability impact under kernel CVSS guidance."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:53:47.633Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9648adb1b3ece55c657d3a4f52bfee663b710dfe"
        },
        {
          "url": "https://git.kernel.org/stable/c/034a92c6a81048128fc7b18d278d52438a13902a"
        },
        {
          "url": "https://git.kernel.org/stable/c/8928239e5e2e460d95b8a0b89f61671625e7ece0"
        },
        {
          "url": "https://git.kernel.org/stable/c/c9bdce2359b5f4986eb38d1e81865b3586cc20d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093"
        },
        {
          "url": "https://git.kernel.org/stable/c/4e910dbe36508654a896d5735b318c0b88172570"
        }
      ],
      "title": "qede: confirm skb is allocated before using",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49084",
    "datePublished": "2025-02-26T01:54:43.099Z",
    "dateReserved": "2025-02-26T01:49:39.248Z",
    "dateUpdated": "2026-08-05T08:53:47.633Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49084",
      "date": "2026-09-17",
      "epss": "0.00659",
      "percentile": "0.49909"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-49084\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-02-26T07:00:45.737\",\"lastModified\":\"2026-08-04T10:17:33.797\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nqede: confirm skb is allocated before using\\n\\nqede_build_skb() assumes build_skb() always works and goes straight\\nto skb_reserve(). However, build_skb() can fail under memory pressure.\\nThis results in a kernel panic because the skb to reserve is NULL.\\n\\nAdd a check in case build_skb() failed to allocate and return NULL.\\n\\nThe NULL return is handled correctly in callers to qede_build_skb().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: qede: confirmar que skb est\u00e1 asignado antes de usar qede_build_skb() supone que build_skb() siempre funciona y pasa directamente a skb_reserve(). Sin embargo, build_skb() puede fallar bajo presi\u00f3n de memoria. Esto da como resultado un p\u00e1nico del kernel porque el skb a reservar es NULL. Agregue una verificaci\u00f3n en caso de que build_skb() no pueda asignar y devuelva NULL. El retorno NULL se maneja correctamente en los llamadores a qede_build_skb().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/qlogic/qede/qede_fp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"9648adb1b3ece55c657d3a4f52bfee663b710dfe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"034a92c6a81048128fc7b18d278d52438a13902a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"8928239e5e2e460d95b8a0b89f61671625e7ece0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"c9bdce2359b5f4986eb38d1e81865b3586cc20d2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"b2d6b3db9d1cf80908964036dbe1c52a86b1afb1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"e1fd0c42acfa22bb34d2ab6a111484f466ab8093\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8a8633978b842c88fbcfe00d4e5dde96048f630e\",\"lessThan\":\"4e910dbe36508654a896d5735b318c0b88172570\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/qlogic/qede/qede_fp.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.18\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.18\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.238\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.189\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.111\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.34\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.16.20\",\"lessThanOrEqual\":\"5.16.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.17.3\",\"lessThanOrEqual\":\"5.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.18\",\"versionEndExcluding\":\"4.19.238\",\"matchCriteriaId\":\"767A1BFF-2D40-4BAB-945E-ACD1183BC6C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.189\",\"matchCriteriaId\":\"8CB6E8F5-C2B1-46F3-A807-0F6104AC340F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.111\",\"matchCriteriaId\":\"96258501-7BCE-4C55-8A38-8AC9D327626D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.34\",\"matchCriteriaId\":\"D25878D3-7761-4E9F-8919-E92CD53896E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.16.20\",\"matchCriteriaId\":\"ABBBA66E-0244-4621-966B-9790AF1EEB00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.17\",\"versionEndExcluding\":\"5.17.3\",\"matchCriteriaId\":\"AE420AC7-1E59-4398-B84F-71F4B4337762\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6AD94161-84BB-42E6-9882-4FC0C42E9FC1\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/034a92c6a81048128fc7b18d278d52438a13902a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4e910dbe36508654a896d5735b318c0b88172570\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8928239e5e2e460d95b8a0b89f61671625e7ece0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9648adb1b3ece55c657d3a4f52bfee663b710dfe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b2d6b3db9d1cf80908964036dbe1c52a86b1afb1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c9bdce2359b5f4986eb38d1e81865b3586cc20d2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e1fd0c42acfa22bb34d2ab6a111484f466ab8093\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:45:58+00:00",
      "cve": "CVE-2022-49084",
      "id": "CVE-2022-49084",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "90",
      "product_status:known_not_affected": "184",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: qede: confirm skb is allocated before using",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49084.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T01:34:17Z",
      "cve": "CVE-2022-49084",
      "id": "CVE-2022-49084",
      "initial_release_date": "2025-02-27T03:12:32Z",
      "product_status:known_affected": "509",
      "product_status:known_not_affected": "177",
      "product_status:recommended": "249",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49084",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49084.json",
      "version": "54"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.