CVE-2022-49260

critical · 9.8

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it.

9.8

CVSS

0.7%

EPSS (exploit prob.)

50th

EPSS percentile

2025-02-26

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
linux	linux_kernel	>= 5.14, < 5.15.33
linux	linux_kernel	>= 5.16, < 5.16.19
linux	linux_kernel	>= 5.17, < 5.17.2

Check a specific version with /api/v1/cve/match.

References

https://git.kernel.org/stable/c/0a2a464f863187f97e96ebc6384c052cafd4a54c
https://git.kernel.org/stable/c/40dba7c26e897c637e91312b35f664f1d4d0073c
https://git.kernel.org/stable/c/5c1149e2abe0b7489300736b8277b45b113de67f
https://git.kernel.org/stable/c/ef7b10f3cac7810ddcfd976304fd125aca33d144

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-49260