What is CVE-2022-49260?

CVE-2022-49260 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2025-02-26.

How severe is CVE-2022-49260?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Linux

CVE-2022-49260

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it.

EPSS: 0.003 (17.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions 6c46a3297beae4ae2d22b26da5e091f058381c7c, 5.14, 0
Linux Linux_kernel

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2022-49260?: CVE-2022-49260 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2025-02-26.
How severe is CVE-2022-49260?: Critical severity. CVSS v3 base score is 9.8 out of 10.