Vulnerability in Linux
CVE-2022-49868
In the Linux kernel, the following vulnerability has been resolved: phy: ralink: mt7621-pci: add sentinel to quirks table With mt7621 soc_dev_attr fixed to register the soc as a device, kernel will experience an oops in soc_device_match_attr This quirk test was introduced in the staging driver in commit 9445ccb3714c ("staging: mt7621-pci-phy: add quirks for 'E2' revision using 'soc_device_attribute'"). The staging driver was removed, and later re-added in commit d87da32372a0 ("phy: ralink: Add PHY driver for MT7621 PCIe PHY") for kernel 5.11
EPSS: 0.002 (7.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions d87da32372a03ce121fc65ccd2c9a43edf56b364, 5.11, 0
- Linux Linux_kernel — versions 6.1
References
Frequently asked questions
- What is CVE-2022-49868?
- CVE-2022-49868 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-05-01.
- How severe is CVE-2022-49868?
- Medium severity. CVSS v3 base score is 5.5 out of 10.