CVE-2022-49956 (GCVE-0-2022-49956)

Vulnerability from cvelistv5 – Published: 2025-06-18 11:00 – Updated: 2026-08-05 08:56
VLAI
Title
staging: rtl8712: fix use after free bugs
Summary
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use after free bugs _Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl() functions don't do anything except free the "pcmd" pointer. It results in a use after free. Delete them.
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < 7dce6b0ee7d78667d6c831ced957a08769973063 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < 376e15487fec837301d888068a3fcc82efb6171a (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < 9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < d0aac7146e96bf39e79c65087d21dfa02ef8db38 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < 19e3f69d19801940abc2ac37c169882769ed9770 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < dc02aaf950015850e7589696521c7fca767cea77 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < b1727def850904e4b8ba384043775672841663a1 (git)
Affected: 2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef , < e230a4455ac3e9b112f0367d1b8e255e141afae0 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.37
Unaffected: 0 , < 2.6.37 (semver)
Unaffected: 4.9.328 , ≤ 4.9.* (semver)
Unaffected: 4.14.293 , ≤ 4.14.* (semver)
Unaffected: 4.19.258 , ≤ 4.19.* (semver)
Unaffected: 5.4.213 , ≤ 5.4.* (semver)
Unaffected: 5.10.142 , ≤ 5.10.* (semver)
Unaffected: 5.15.66 , ≤ 5.15.* (semver)
Unaffected: 5.19.8 , ≤ 5.19.* (semver)
Unaffected: 6.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/rtl8712/rtl8712_cmd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7dce6b0ee7d78667d6c831ced957a08769973063",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "376e15487fec837301d888068a3fcc82efb6171a",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "d0aac7146e96bf39e79c65087d21dfa02ef8db38",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "19e3f69d19801940abc2ac37c169882769ed9770",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "dc02aaf950015850e7589696521c7fca767cea77",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "b1727def850904e4b8ba384043775672841663a1",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            },
            {
              "lessThan": "e230a4455ac3e9b112f0367d1b8e255e141afae0",
              "status": "affected",
              "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/staging/rtl8712/rtl8712_cmd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.37"
            },
            {
              "lessThan": "2.6.37",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.328",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.293",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.258",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.213",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.142",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.66",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.328",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.293",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.258",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.213",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.142",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.66",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.8",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix use after free bugs\n\n_Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl()\nfunctions don\u0027t do anything except free the \"pcmd\" pointer.  It\nresults in a use after free.  Delete them."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The UAF is in the rtl8712 host-to-firmware cmd filter (`cmd_hdl_filter` \u2192 `r8712_cmd_thread`), a local driver software path for queued `cmd_obj`s, not WiFi-frame RX (Adjacent) or USB probe/URB handling (Physical); adapter presence is an environmental precondition.\nAC:H - Triggering requires a `_Read_MACREG`/`_Write_MACREG` `cmd_obj` on the cmd queue, but no in-tree caller has ever enqueued those codes since the driver was added\u2014success depends on a condition the attacker cannot influence.\nPR:L - If those H2C commands were issued, they would come from wireless management paths gated by `CAP_NET_ADMIN`; per kernel CNA guidance that capability is reachable via user namespaces, so Privileges Required is Low rather than High.\nUI:N - Command dequeue and filter execution run entirely in the driver\u0027s cmd thread with no separate victim action such as mounting a filesystem or confirming a prompt.\nS:U - The resulting heap UAF/double-free stays inside the host kernel\u0027s security authority and does not cross a VM, IOMMU, or sandbox boundary.\nC:H - After `r8712_free_cmd_obj()` the freed `cmd_obj` is reused for `cmdcode`/`parmbuf`/`cmdsz` reads; per kernel UAF guidance that enables disclosure of reclaimed heap contents.\nI:H - The same path later double-frees `pcmd`, a classic heap UAF/double-free primitive that can be groomed into arbitrary write or control-flow hijack, so Integrity is High.\nA:H - Use-after-free and double-free of `cmd_obj` cause kernel oops/KASAN/BUG failures in the cmd thread, which is Availability High under kernel CVSS guidance."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:56:53.613Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063"
        },
        {
          "url": "https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a"
        },
        {
          "url": "https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38"
        },
        {
          "url": "https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77"
        },
        {
          "url": "https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0"
        }
      ],
      "title": "staging: rtl8712: fix use after free bugs",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49956",
    "datePublished": "2025-06-18T11:00:18.341Z",
    "dateReserved": "2025-06-18T10:57:27.382Z",
    "dateUpdated": "2026-08-05T08:56:53.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49956",
      "date": "2026-09-30",
      "epss": "0.00242",
      "percentile": "0.13828"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/staging/rtl8712/rtl8712_cmd.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "7dce6b0ee7d78667d6c831ced957a08769973063",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "376e15487fec837301d888068a3fcc82efb6171a",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "d0aac7146e96bf39e79c65087d21dfa02ef8db38",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "19e3f69d19801940abc2ac37c169882769ed9770",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "dc02aaf950015850e7589696521c7fca767cea77",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b1727def850904e4b8ba384043775672841663a1",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e230a4455ac3e9b112f0367d1b8e255e141afae0",
                    "status": "affected",
                    "version": "2865d42c78a9121caad52cb02d1fbb7f5cdbc4ef",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/staging/rtl8712/rtl8712_cmd.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "2.6.37"
                  },
                  {
                    "lessThan": "2.6.37",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.9.*",
                    "status": "unaffected",
                    "version": "4.9.328",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.293",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.258",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.213",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.142",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.66",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.19.*",
                    "status": "unaffected",
                    "version": "5.19.8",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.0",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9AC39563-8D49-42F4-952A-04264AAB2EF7",
                    "versionEndExcluding": "4.9.328",
                    "versionStartIncluding": "2.6.37",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5D9B742D-912D-4E0C-A42F-367086FDEA88",
                    "versionEndExcluding": "4.14.293",
                    "versionStartIncluding": "4.10",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "253D30F5-3734-4663-883A-288786D3B66E",
                    "versionEndExcluding": "4.19.258",
                    "versionStartIncluding": "4.15",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4C373116-9E23-44BA-A6B7-87C8BF5C3B85",
                    "versionEndExcluding": "5.4.213",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D44AD643-5591-432E-BD41-C2C737F54AC0",
                    "versionEndExcluding": "5.10.142",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "52AE7E2B-7BE3-4B8A-89CC-AB62434899A3",
                    "versionEndExcluding": "5.15.66",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7FEC7656-4CE2-424C-8830-EDB160E701C8",
                    "versionEndExcluding": "5.19.8",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix use after free bugs\n\n_Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl()\nfunctions don\u0027t do anything except free the \"pcmd\" pointer.  It\nresults in a use after free.  Delete them."
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: rtl8712: se corrige el error \"use after free\". Las devoluciones de llamada _Read/Write_MACREG son nulas, por lo que las funciones read/write_macreg_hdl() solo liberan el puntero \"pcmd\". Esto genera un error \"use after free\". Elim\u00ednelas."
          }
        ],
        "id": "CVE-2022-49956",
        "lastModified": "2026-08-04T10:18:00.997",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.0,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.0,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-06-18T11:15:22.773",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:42:59+00:00",
      "cve": "CVE-2022-49956",
      "id": "CVE-2022-49956",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "28",
      "product_status:known_not_affected": "246",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: staging: rtl8712: fix use after free bugs",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49956.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-30T15:50:32Z",
      "cve": "CVE-2022-49956",
      "id": "CVE-2022-49956",
      "initial_release_date": "2025-06-19T03:45:37Z",
      "product_status:known_not_affected": "328",
      "product_status:recommended": "272",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49956",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49956.json",
      "version": "46"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.