{"answers":{"affected":"It affects 1 product.","exploited":"There is no known exploitation of CVE-2022-49846 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2022-49846 is a high-severity memory corruption vulnerability in Linux kernel, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-49846 and fix it if it is affected.\n\nWhat it is: CVE-2022-49846 is a high-severity memory corruption vulnerability in Linux kernel, published on 1 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-49846 in the wild and no public exploit code.\n\nAffected product: Linux kernel. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-49846/ (Markdown: https://insights.sbomify.com/CVE-2022-49846/index.md)","id":"CVE-2022-49846","markdown":"https://insights.sbomify.com/CVE-2022-49846/index.md","name":"CVE-2022-49846","record":{"aliases":["DEBIAN-CVE-2022-49846","GHSA-79gf-mr55-pw4g","RHSA-2025:10974","RHSA-2025:10976","RHSA-2025:10977","RHSA-2025:10978","RHSA-2025:10979","RHSA-2025:10980","RHSA-2025:10981","UBUNTU-CVE-2022-49846"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["code_execution","denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel UDF","requires_auth":"low_privilege","summary":"A slab-out-of-bounds write in the Linux kernel UDF filesystem allows attackers to cause memory corruption, potentially leading to code execution or system crashes.","user_interaction":"not_required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[{"product":"linux_kernel","vendor":"linux"}],"cvss":{"score":7.8,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"}],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Fix a slab-out-of-bounds write bug in udf_find_entry()\n\nSyzbot reported a slab-out-of-bounds Write bug:\n\nloop0: detected capacity change from 0 to 2048\n==================================================================\nBUG: KASAN: slab-out-of-bounds in udf_find_entry+0x8a5/0x14f0\nfs/udf/namei.c:253\nWrite of size 105 at addr ffff8880123ff896 by task syz-executor323/3610\n\nCPU: 0 PID: 3610 Comm: syz-executor323 Not tainted\n6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0\nHardware name: Google Compute Engine/Google Compute Engine, BIOS\nGoogle 10/11/2022\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106\n print_address_description+0x74/0x340 mm/kasan/report.c:284\n print_report+0x107/0x1f0 mm/kasan/report.c:395\n kasan_report+0xcd/0x100 mm/kasan/report.c:495\n kasan_check_range+0x2a7/0x2e0 mm/kasan/generic.c:189\n memcpy+0x3c/0x60 mm/kasan/shadow.c:66\n udf_find_entry+0x8a5/0x14f0 fs/udf/namei.c:253\n udf_lookup+0xef/0x340 fs/udf/namei.c:309\n lookup_open fs/namei.c:3391 [inline]\n open_last_lookups fs/namei.c:3481 [inline]\n path_openat+0x10e6/0x2df0 fs/namei.c:3710\n do_filp_open+0x264/0x4f0 fs/namei.c:3740\n do_sys_openat2+0x124/0x4e0 fs/open.c:1310\n do_sys_open fs/open.c:1326 [inline]\n __do_sys_creat fs/open.c:1402 [inline]\n __se_sys_creat fs/open.c:1396 [inline]\n __x64_sys_creat+0x11f/0x160 fs/open.c:1396\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\nRIP: 0033:0x7ffab0d164d9\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89\nf7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01\nf0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007ffe1a7e6bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffab0d164d9\nRDX: 00007ffab0d164d9 RSI: 0000000000000000 RDI: 0000000020000180\nRBP: 00007ffab0cd5a10 R08: 0000000000000000 R09: 0000000000000000\nR10: 00005555573552c0 R11: 0000000000000246 R12: 00007ffab0cd5aa0\nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n \u003c/TASK\u003e\n\nAllocated by task 3610:\n kasan_save_stack mm/kasan/common.c:45 [inline]\n kasan_set_track+0x3d/0x60 mm/kasan/common.c:52\n ____kasan_kmalloc mm/kasan/common.c:371 [inline]\n __kasan_kmalloc+0x97/0xb0 mm/kasan/common.c:380\n kmalloc include/linux/slab.h:576 [inline]\n udf_find_entry+0x7b6/0x14f0 fs/udf/namei.c:243\n udf_lookup+0xef/0x340 fs/udf/namei.c:309\n lookup_open fs/namei.c:3391 [inline]\n open_last_lookups fs/namei.c:3481 [inline]\n path_openat+0x10e6/0x2df0 fs/namei.c:3710\n do_filp_open+0x264/0x4f0 fs/namei.c:3740\n do_sys_openat2+0x124/0x4e0 fs/open.c:1310\n do_sys_open fs/open.c:1326 [inline]\n __do_sys_creat fs/open.c:1402 [inline]\n __se_sys_creat fs/open.c:1396 [inline]\n __x64_sys_creat+0x11f/0x160 fs/open.c:1396\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe buggy address belongs to the object at ffff8880123ff800\n which belongs to the cache kmalloc-256 of size 256\nThe buggy address is located 150 bytes inside of\n 256-byte region [ffff8880123ff800, ffff8880123ff900)\n\nThe buggy address belongs to the physical page:\npage:ffffea000048ff80 refcount:1 mapcount:0 mapping:0000000000000000\nindex:0x0 pfn:0x123fe\nhead:ffffea000048ff80 order:1 compound_mapcount:0 compound_pincount:0\nflags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)\nraw: 00fff00000010200 ffffea00004b8500 dead000000000003 ffff888012041b40\nraw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\npage_owner tracks the page as allocated\npage last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(),\npid 1, tgid 1 (swapper/0), ts 1841222404, free_ts 0\n create_dummy_stack mm/page_owner.c:\n---truncated---","ecosystems":["Red Hat:enterprise_linux:8::baseos","Red Hat:enterprise_linux:9::baseos","Red Hat:rhel_e4s:8.6::baseos","Red Hat:rhel_e4s:8.8::baseos","Red Hat:rhel_e4s:9.0::baseos","Red Hat:rhel_e4s:9.2::baseos","Red Hat:rhel_eus:9.4::baseos"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"udf: Fix a slab-out-of-bounds write bug in udf_find_entry()","id":"CVE-2022-49846","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"linux:linux_kernel","products":["linux:linux_kernel"],"type":"memory_corruption","year":"2022"},"n_packages":93,"n_references":8,"next":{"headline":"net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload","id":"CVE-2022-49847"},"packages":[{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-7.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-7.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553-debuginfo","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-7.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553-debugsource","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-6.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_16_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_16_1","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-6.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_16_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_16_1-debuginfo","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-6.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_16_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_16_1-debugsource","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-5.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_30_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_30_1","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-5.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_30_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_30_1-debuginfo","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-5.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_30_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_30_1-debugsource","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-3.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_40_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_40_1","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-3.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_40_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_40_1-debuginfo","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-3.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_40_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_40_1-debugsource","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-1.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_53_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-1.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_53_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debuginfo","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","fixed":["0:1-1.el8_10"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-553_53_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-553_53_1-debugsource","source":"RHSA-2025:10977"},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","fixed":["0:1-4.el9_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-5_14_0-570_17_1","purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1","source":"RHSA-2025:10981"},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","fixed":["0:1-4.el9_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-5_14_0-570_17_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debuginfo","source":"RHSA-2025:10981"},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","fixed":["0:1-4.el9_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-5_14_0-570_17_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-5_14_0-570_17_1-debugsource","source":"RHSA-2025:10981"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-7.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_118_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_118_1","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-7.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_118_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_118_1-debuginfo","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-7.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_118_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_118_1-debugsource","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-6.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_131_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_131_1","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-6.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_131_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_131_1-debuginfo","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-6.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_131_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_131_1-debugsource","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-3.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_137_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_137_1","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-3.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_137_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_137_1-debuginfo","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-3.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_137_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_137_1-debugsource","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-1.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_145_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_145_1","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-1.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_145_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_145_1-debuginfo","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-1.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_145_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_145_1-debugsource","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-11.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_91_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_91_1","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-11.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_91_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_91_1-debuginfo","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","fixed":["0:1-11.el8_6"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-372_91_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-372_91_1-debugsource","source":"RHSA-2025:10976"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-10.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_43_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_43_1","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-10.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_43_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_43_1-debuginfo","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-10.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_43_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_43_1-debugsource","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-7.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_67_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_67_1","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-7.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_67_1-debuginfo","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_67_1-debuginfo","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-7.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_67_1-debugsource","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_67_1-debugsource","source":"RHSA-2025:10974"},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","fixed":["0:1-5.el8_8"],"introduced":["0"],"last_affected":[],"package":"kpatch-patch-4_18_0-477_81_1","purl":"pkg:rpm/redhat/kpatch-patch-4_18_0-477_81_1","source":"RHSA-2025:10974"}],"prev":{"headline":"can: j1939: j1939_send_one(): fix missing CAN header initialization","id":"CVE-2022-49845"},"products":["Linux"],"published":"2025-05-01","related":[{"cvss_score":8.8,"headline":"Linux Kernel Out-of-Bounds Write","id":"CVE-2026-53266","kev_date_added":"2026-09-18","published":"2026-06-25"},{"cvss_score":8.8,"headline":"Linux Kernel Improper Input Validation","id":"CVE-2013-6282","kev_date_added":"2022-09-15","published":"2013-11-19"},{"cvss_score":8.4,"headline":"Linux Kernel Heap-Based Buffer Overflow","id":"CVE-2022-0185","kev_date_added":"2024-08-21","published":"2022-02-11"},{"cvss_score":8.4,"headline":"Linux Kernel Privilege Escalation","id":"CVE-2013-2094","kev_date_added":"2022-09-15","published":"2013-05-14"},{"cvss_score":7.8,"headline":"Linux Kernel Unspecified","id":"CVE-2026-53362","kev_date_added":"2026-08-27","published":"2026-07-04"},{"cvss_score":7.8,"headline":"Linux Kernel Missing Initialization of a Variable","id":"CVE-2026-46300","kev_date_added":"2026-10-28","published":"2026-05-23"},{"cvss_score":7.8,"headline":"Linux Kernel Race Condition","id":"CVE-2025-39964","kev_date_added":"2026-09-18","published":"2025-10-13"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-08-05","vendors":["Linux"]},"summary":"A slab-out-of-bounds write in the Linux kernel UDF filesystem allows attackers to cause memory corruption, potentially leading to code execution or system crashes.","url":"https://insights.sbomify.com/CVE-2022-49846/"}