CVE-2022-49578 is a data-race vulnerability in the Linux kernel's handling of sysctl_ip_prot_sock, affecting Linux kernel versions. This medium-severity vulnerability (CVSS 4.7) requires local access and high attack complexity, potentially leading to a denial of service. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.11, < 5.10.134CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.15.58CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.16, < 5.18.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* | ||
5.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.